--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb"} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb"} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb"} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb"} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4"} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954"} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4"} {"level":"error","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954"} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4"} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954"} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d"} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4"} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d"} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4"} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954"} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d"} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab"} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d"} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab"} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d"} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab"} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d"} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab"} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350"} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83"} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d"} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350"} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83"} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7"} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7"} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7"} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:35:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7"} {"level":"info","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2831ae70-155b-4a88-a2e3-3bb5376155f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60562","PortSpecifier":{"PortValue":60562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2831ae70-155b-4a88-a2e3-3bb5376155f6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2831ae70-155b-4a88-a2e3-3bb5376155f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60562","PortSpecifier":{"PortValue":60562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170140,"nanos":870458580},"http":{"id":"2831ae70-155b-4a88-a2e3-3bb5376155f6","method":"POST","headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2831ae70-155b-4a88-a2e3-3bb5376155f6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2831ae70-155b-4a88-a2e3-3bb5376155f6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"faf73f66-aa46-43d3-81db-704f750d99f3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"]}} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2831ae70-155b-4a88-a2e3-3bb5376155f6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"faf73f66-aa46-43d3-81db-704f750d99f3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2831ae70-155b-4a88-a2e3-3bb5376155f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2831ae70-155b-4a88-a2e3-3bb5376155f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2831ae70-155b-4a88-a2e3-3bb5376155f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-932843/auth-test-model-932843\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2831ae70-155b-4a88-a2e3-3bb5376155f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2831ae70-155b-4a88-a2e3-3bb5376155f6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2831ae70-155b-4a88-a2e3-3bb5376155f6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2831ae70-155b-4a88-a2e3-3bb5376155f6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2831ae70-155b-4a88-a2e3-3bb5376155f6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07386b0a-5ce9-443e-87fd-8a1a88d0c4e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:35232","PortSpecifier":{"PortValue":35232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07386b0a-5ce9-443e-87fd-8a1a88d0c4e2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07386b0a-5ce9-443e-87fd-8a1a88d0c4e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:35232","PortSpecifier":{"PortValue":35232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170140,"nanos":911080555},"http":{"id":"07386b0a-5ce9-443e-87fd-8a1a88d0c4e2","method":"POST","headers":{":authority":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"07386b0a-5ce9-443e-87fd-8a1a88d0c4e2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07386b0a-5ce9-443e-87fd-8a1a88d0c4e2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"faf73f66-aa46-43d3-81db-704f750d99f3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"]}} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07386b0a-5ce9-443e-87fd-8a1a88d0c4e2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"faf73f66-aa46-43d3-81db-704f750d99f3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07386b0a-5ce9-443e-87fd-8a1a88d0c4e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07386b0a-5ce9-443e-87fd-8a1a88d0c4e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07386b0a-5ce9-443e-87fd-8a1a88d0c4e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f21d6/auth-test-model-1f21d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f21d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"07386b0a-5ce9-443e-87fd-8a1a88d0c4e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07386b0a-5ce9-443e-87fd-8a1a88d0c4e2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07386b0a-5ce9-443e-87fd-8a1a88d0c4e2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07386b0a-5ce9-443e-87fd-8a1a88d0c4e2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07386b0a-5ce9-443e-87fd-8a1a88d0c4e2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e03e4e1-baad-42d5-b1de-09d12a06081c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60578","PortSpecifier":{"PortValue":60578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e03e4e1-baad-42d5-b1de-09d12a06081c","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e03e4e1-baad-42d5-b1de-09d12a06081c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60578","PortSpecifier":{"PortValue":60578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170140,"nanos":951213426},"http":{"id":"8e03e4e1-baad-42d5-b1de-09d12a06081c","method":"POST","headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8e03e4e1-baad-42d5-b1de-09d12a06081c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e03e4e1-baad-42d5-b1de-09d12a06081c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"faf73f66-aa46-43d3-81db-704f750d99f3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"]}} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e03e4e1-baad-42d5-b1de-09d12a06081c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"faf73f66-aa46-43d3-81db-704f750d99f3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e03e4e1-baad-42d5-b1de-09d12a06081c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e03e4e1-baad-42d5-b1de-09d12a06081c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e03e4e1-baad-42d5-b1de-09d12a06081c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-932843/auth-test-model-932843\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8e03e4e1-baad-42d5-b1de-09d12a06081c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e03e4e1-baad-42d5-b1de-09d12a06081c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e03e4e1-baad-42d5-b1de-09d12a06081c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e03e4e1-baad-42d5-b1de-09d12a06081c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e03e4e1-baad-42d5-b1de-09d12a06081c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a125f5e-4c53-4a77-8bf1-9bbae19863cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:35238","PortSpecifier":{"PortValue":35238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a125f5e-4c53-4a77-8bf1-9bbae19863cd","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a125f5e-4c53-4a77-8bf1-9bbae19863cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:35238","PortSpecifier":{"PortValue":35238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170140,"nanos":990212823},"http":{"id":"1a125f5e-4c53-4a77-8bf1-9bbae19863cd","method":"POST","headers":{":authority":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1a125f5e-4c53-4a77-8bf1-9bbae19863cd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a125f5e-4c53-4a77-8bf1-9bbae19863cd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"faf73f66-aa46-43d3-81db-704f750d99f3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"]}} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a125f5e-4c53-4a77-8bf1-9bbae19863cd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"faf73f66-aa46-43d3-81db-704f750d99f3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a125f5e-4c53-4a77-8bf1-9bbae19863cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a125f5e-4c53-4a77-8bf1-9bbae19863cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a125f5e-4c53-4a77-8bf1-9bbae19863cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f21d6/auth-test-model-1f21d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f21d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1a125f5e-4c53-4a77-8bf1-9bbae19863cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a125f5e-4c53-4a77-8bf1-9bbae19863cd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a125f5e-4c53-4a77-8bf1-9bbae19863cd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a125f5e-4c53-4a77-8bf1-9bbae19863cd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:35:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a125f5e-4c53-4a77-8bf1-9bbae19863cd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"} {"level":"info","ts":"2026-07-27T16:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"} {"level":"info","ts":"2026-07-27T16:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab"} {"level":"info","ts":"2026-07-27T16:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"info","ts":"2026-07-27T16:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954"} {"level":"info","ts":"2026-07-27T16:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"} {"level":"info","ts":"2026-07-27T16:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7"} {"level":"info","ts":"2026-07-27T16:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83"} {"level":"info","ts":"2026-07-27T16:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb"} {"level":"info","ts":"2026-07-27T16:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d"} {"level":"info","ts":"2026-07-27T16:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4"} {"level":"info","ts":"2026-07-27T16:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350"} {"level":"debug","ts":"2026-07-27T16:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"} {"level":"debug","ts":"2026-07-27T16:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4"} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4"} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4"} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4"} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb"} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4"} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb"} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4"} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7"} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb"} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4"} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7"} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350"} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d"} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350"} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d"} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954"} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954"} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab"} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab"} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954"} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab"} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954"} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab"} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83"} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954"} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"} {"level":"info","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"} {"level":"info","ts":"2026-07-27T16:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83"} {"level":"info","ts":"2026-07-27T16:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"} {"level":"info","ts":"2026-07-27T16:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"} {"level":"info","ts":"2026-07-27T16:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"} {"level":"info","ts":"2026-07-27T16:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"} {"level":"info","ts":"2026-07-27T16:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"} {"level":"info","ts":"2026-07-27T16:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"} {"level":"error","ts":"2026-07-27T16:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T16:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7adf753a-22d4-41c5-8a0b-b5b2b8cfb6f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41864","PortSpecifier":{"PortValue":41864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7adf753a-22d4-41c5-8a0b-b5b2b8cfb6f9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:36:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7adf753a-22d4-41c5-8a0b-b5b2b8cfb6f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41864","PortSpecifier":{"PortValue":41864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170178,"nanos":965625764},"http":{"id":"7adf753a-22d4-41c5-8a0b-b5b2b8cfb6f9","method":"POST","headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:36:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7adf753a-22d4-41c5-8a0b-b5b2b8cfb6f9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T16:36:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7adf753a-22d4-41c5-8a0b-b5b2b8cfb6f9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"faf73f66-aa46-43d3-81db-704f750d99f3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"]}} {"level":"debug","ts":"2026-07-27T16:36:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7adf753a-22d4-41c5-8a0b-b5b2b8cfb6f9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"faf73f66-aa46-43d3-81db-704f750d99f3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:36:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7adf753a-22d4-41c5-8a0b-b5b2b8cfb6f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:36:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7adf753a-22d4-41c5-8a0b-b5b2b8cfb6f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:36:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7adf753a-22d4-41c5-8a0b-b5b2b8cfb6f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-932843/auth-test-model-932843\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:36:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7adf753a-22d4-41c5-8a0b-b5b2b8cfb6f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T16:36:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7adf753a-22d4-41c5-8a0b-b5b2b8cfb6f9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T16:36:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7adf753a-22d4-41c5-8a0b-b5b2b8cfb6f9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-27T16:36:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7adf753a-22d4-41c5-8a0b-b5b2b8cfb6f9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:36:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7adf753a-22d4-41c5-8a0b-b5b2b8cfb6f9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2006c206-16ad-4955-94ac-b7e1ab3465d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34194","PortSpecifier":{"PortValue":34194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2006c206-16ad-4955-94ac-b7e1ab3465d5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2006c206-16ad-4955-94ac-b7e1ab3465d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34194","PortSpecifier":{"PortValue":34194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170179,"nanos":8330405},"http":{"id":"2006c206-16ad-4955-94ac-b7e1ab3465d5","method":"POST","headers":{":authority":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2006c206-16ad-4955-94ac-b7e1ab3465d5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2006c206-16ad-4955-94ac-b7e1ab3465d5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"faf73f66-aa46-43d3-81db-704f750d99f3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"]}} {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2006c206-16ad-4955-94ac-b7e1ab3465d5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"faf73f66-aa46-43d3-81db-704f750d99f3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2006c206-16ad-4955-94ac-b7e1ab3465d5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2006c206-16ad-4955-94ac-b7e1ab3465d5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2006c206-16ad-4955-94ac-b7e1ab3465d5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f21d6/auth-test-model-1f21d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f21d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2006c206-16ad-4955-94ac-b7e1ab3465d5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2006c206-16ad-4955-94ac-b7e1ab3465d5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2006c206-16ad-4955-94ac-b7e1ab3465d5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2006c206-16ad-4955-94ac-b7e1ab3465d5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2006c206-16ad-4955-94ac-b7e1ab3465d5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"354b5446-7bef-47e7-8288-096d4bfbe27b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34198","PortSpecifier":{"PortValue":34198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"354b5446-7bef-47e7-8288-096d4bfbe27b","method":"GET","path":"/maas-api/v1/api-keys/389f8d5f-25eb-41a3-99ac-56059f414aae","host":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"354b5446-7bef-47e7-8288-096d4bfbe27b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:34198","PortSpecifier":{"PortValue":34198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170179,"nanos":47458552},"http":{"id":"354b5446-7bef-47e7-8288-096d4bfbe27b","method":"GET","headers":{":authority":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/389f8d5f-25eb-41a3-99ac-56059f414aae",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"354b5446-7bef-47e7-8288-096d4bfbe27b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"354b5446-7bef-47e7-8288-096d4bfbe27b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"faf73f66-aa46-43d3-81db-704f750d99f3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"]}} {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"354b5446-7bef-47e7-8288-096d4bfbe27b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"faf73f66-aa46-43d3-81db-704f750d99f3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/389f8d5f-25eb-41a3-99ac-56059f414aae",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"354b5446-7bef-47e7-8288-096d4bfbe27b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"354b5446-7bef-47e7-8288-096d4bfbe27b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"354b5446-7bef-47e7-8288-096d4bfbe27b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f21d6/auth-test-model-1f21d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f21d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"354b5446-7bef-47e7-8288-096d4bfbe27b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"354b5446-7bef-47e7-8288-096d4bfbe27b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"354b5446-7bef-47e7-8288-096d4bfbe27b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"354b5446-7bef-47e7-8288-096d4bfbe27b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"354b5446-7bef-47e7-8288-096d4bfbe27b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea197b7c-7950-427a-a1c6-30a91f5563a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41872","PortSpecifier":{"PortValue":41872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea197b7c-7950-427a-a1c6-30a91f5563a2","method":"GET","path":"/maas-api/v1/api-keys/389f8d5f-25eb-41a3-99ac-56059f414aae","host":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea197b7c-7950-427a-a1c6-30a91f5563a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41872","PortSpecifier":{"PortValue":41872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170179,"nanos":82837443},"http":{"id":"ea197b7c-7950-427a-a1c6-30a91f5563a2","method":"GET","headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/389f8d5f-25eb-41a3-99ac-56059f414aae",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ea197b7c-7950-427a-a1c6-30a91f5563a2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea197b7c-7950-427a-a1c6-30a91f5563a2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"faf73f66-aa46-43d3-81db-704f750d99f3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"]}} {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea197b7c-7950-427a-a1c6-30a91f5563a2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"faf73f66-aa46-43d3-81db-704f750d99f3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/389f8d5f-25eb-41a3-99ac-56059f414aae",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea197b7c-7950-427a-a1c6-30a91f5563a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea197b7c-7950-427a-a1c6-30a91f5563a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea197b7c-7950-427a-a1c6-30a91f5563a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-932843/auth-test-model-932843\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ea197b7c-7950-427a-a1c6-30a91f5563a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea197b7c-7950-427a-a1c6-30a91f5563a2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea197b7c-7950-427a-a1c6-30a91f5563a2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea197b7c-7950-427a-a1c6-30a91f5563a2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:36:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea197b7c-7950-427a-a1c6-30a91f5563a2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4"} {"level":"info","ts":"2026-07-27T16:36:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"} {"level":"info","ts":"2026-07-27T16:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d"} {"level":"info","ts":"2026-07-27T16:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83"} {"level":"info","ts":"2026-07-27T16:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb"} {"level":"info","ts":"2026-07-27T16:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7"} {"level":"info","ts":"2026-07-27T16:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"} {"level":"info","ts":"2026-07-27T16:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350"} {"level":"info","ts":"2026-07-27T16:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"info","ts":"2026-07-27T16:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954"} {"level":"info","ts":"2026-07-27T16:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"} {"level":"info","ts":"2026-07-27T16:36:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab"} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7"} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7"} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7"} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7"} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7"} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350"} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350"} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350"} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350"} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350"} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350"} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350"} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350"} {"level":"error","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"info","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350"} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d"} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d"} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954"} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb"} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954"} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb"} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954"} {"level":"error","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb"} {"level":"error","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb"} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab"} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab"} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb"} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab"} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4"} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83"} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4"} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83"} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:36:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"} {"level":"info","ts":"2026-07-27T16:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"} {"level":"debug","ts":"2026-07-27T16:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:36:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:36:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"} {"level":"info","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da93f0fb-906b-40f6-9626-399800f4cd45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54788","PortSpecifier":{"PortValue":54788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"da93f0fb-906b-40f6-9626-399800f4cd45","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da93f0fb-906b-40f6-9626-399800f4cd45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54788","PortSpecifier":{"PortValue":54788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170224,"nanos":339867823},"http":{"id":"da93f0fb-906b-40f6-9626-399800f4cd45","method":"POST","headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"da93f0fb-906b-40f6-9626-399800f4cd45","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"da93f0fb-906b-40f6-9626-399800f4cd45","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"faf73f66-aa46-43d3-81db-704f750d99f3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"]}} {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"da93f0fb-906b-40f6-9626-399800f4cd45","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"faf73f66-aa46-43d3-81db-704f750d99f3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da93f0fb-906b-40f6-9626-399800f4cd45","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da93f0fb-906b-40f6-9626-399800f4cd45","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da93f0fb-906b-40f6-9626-399800f4cd45","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-932843/auth-test-model-932843\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"da93f0fb-906b-40f6-9626-399800f4cd45","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da93f0fb-906b-40f6-9626-399800f4cd45","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da93f0fb-906b-40f6-9626-399800f4cd45","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da93f0fb-906b-40f6-9626-399800f4cd45","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da93f0fb-906b-40f6-9626-399800f4cd45","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d446efd6-5700-4ef0-baf0-6d68b0e5a9b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37722","PortSpecifier":{"PortValue":37722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d446efd6-5700-4ef0-baf0-6d68b0e5a9b5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d446efd6-5700-4ef0-baf0-6d68b0e5a9b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37722","PortSpecifier":{"PortValue":37722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170224,"nanos":380010803},"http":{"id":"d446efd6-5700-4ef0-baf0-6d68b0e5a9b5","method":"POST","headers":{":authority":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d446efd6-5700-4ef0-baf0-6d68b0e5a9b5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d446efd6-5700-4ef0-baf0-6d68b0e5a9b5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"faf73f66-aa46-43d3-81db-704f750d99f3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"]}} {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d446efd6-5700-4ef0-baf0-6d68b0e5a9b5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"faf73f66-aa46-43d3-81db-704f750d99f3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d446efd6-5700-4ef0-baf0-6d68b0e5a9b5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d446efd6-5700-4ef0-baf0-6d68b0e5a9b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d446efd6-5700-4ef0-baf0-6d68b0e5a9b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f21d6/auth-test-model-1f21d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f21d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d446efd6-5700-4ef0-baf0-6d68b0e5a9b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d446efd6-5700-4ef0-baf0-6d68b0e5a9b5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d446efd6-5700-4ef0-baf0-6d68b0e5a9b5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d446efd6-5700-4ef0-baf0-6d68b0e5a9b5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d446efd6-5700-4ef0-baf0-6d68b0e5a9b5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99f1a97d-a273-4042-bcac-d176e016f225","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54804","PortSpecifier":{"PortValue":54804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"99f1a97d-a273-4042-bcac-d176e016f225","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99f1a97d-a273-4042-bcac-d176e016f225","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54804","PortSpecifier":{"PortValue":54804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170224,"nanos":425616620},"http":{"id":"99f1a97d-a273-4042-bcac-d176e016f225","method":"POST","headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"99f1a97d-a273-4042-bcac-d176e016f225","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PSDOrt35Ui2Vf94d_kGKldRuLMlfHhQz1bQfygpVUDda1FRs8vHt0MSqQk7g"} {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"99f1a97d-a273-4042-bcac-d176e016f225","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PSDOrt35Ui2Vf94d_kGKldRuLMlfHhQz1bQfygpVUDda1FRs8vHt0MSqQk7g\"}"} {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"99f1a97d-a273-4042-bcac-d176e016f225","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5abda92b-613b-4522-b583-216896da1298","keyName":"e2e-auth-iso-a-c58989","subscription":"e2e-auth-iso-8b879a","tenant":"e2e-shared-a-932843","userId":"5abda92b-613b-4522-b583-216896da1298","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"99f1a97d-a273-4042-bcac-d176e016f225","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99f1a97d-a273-4042-bcac-d176e016f225","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99f1a97d-a273-4042-bcac-d176e016f225","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99f1a97d-a273-4042-bcac-d176e016f225","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-932843/auth-test-model-932843\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99f1a97d-a273-4042-bcac-d176e016f225","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-8b879a"} {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99f1a97d-a273-4042-bcac-d176e016f225","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"99f1a97d-a273-4042-bcac-d176e016f225","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99f1a97d-a273-4042-bcac-d176e016f225","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99f1a97d-a273-4042-bcac-d176e016f225","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:37:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99f1a97d-a273-4042-bcac-d176e016f225","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4cf3a5a2d96b8be8ea389581770702e5736d10be35cb3e476dbbcec01579f68"} {"level":"info","ts":"2026-07-27T16:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07814a50ce075a9e58d26d3325d45d71c7bad628ef5480ebd0281490b92dd350"} {"level":"info","ts":"2026-07-27T16:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8400b6d59ebeac21625539e7336aed413676e9c9d24291a317c2a067d44d1cc1"} {"level":"info","ts":"2026-07-27T16:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c40392e038af70ee549f26bcb504b3d0f1670df24d6a54b019a799a9e6bd3bf8"} {"level":"info","ts":"2026-07-27T16:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83"} {"level":"info","ts":"2026-07-27T16:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50"} {"level":"info","ts":"2026-07-27T16:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83a8f3c1f6c37e8abc9468de309a5030c3b546a7c49544c093e49296c8f583cb"} {"level":"info","ts":"2026-07-27T16:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ce2d7abf6f62507ce17434baaeeb4a4bb7ecea5b4793ba8edaef78878d25656"} {"level":"info","ts":"2026-07-27T16:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ab3f0e3954eb414692c371ae2705c17a064b491b7afae7c876e3802b16ae7e4"} {"level":"info","ts":"2026-07-27T16:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1950775bfbf83b9930f8aeccba373aa5c8f8e8235904fef62e8fc6978c06fd8d"} {"level":"info","ts":"2026-07-27T16:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"info","ts":"2026-07-27T16:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63b4c14188807a28af26a518244760bdfcb808c8eea3a82d8c67b782b3cf871e"} {"level":"info","ts":"2026-07-27T16:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b04634357a4f92bd79db385925069e6c9e35b887c916da2589872acffc6e30dc"} {"level":"info","ts":"2026-07-27T16:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"} {"level":"info","ts":"2026-07-27T16:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"} {"level":"info","ts":"2026-07-27T16:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b"} {"level":"info","ts":"2026-07-27T16:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"} {"level":"info","ts":"2026-07-27T16:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c5f71d56e22f890434ce9dd01bc0240bc91797a3b7802b6193f08e42e503762"} {"level":"info","ts":"2026-07-27T16:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/866fbbb3960703532c977fea897b5d3e54b0a844841604ea19870aa2ccd839ab"} {"level":"info","ts":"2026-07-27T16:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd860b6720cd469aa3f2d21ab1e70c5f17e4efdbc7afee4b9be26b665e59df05"} {"level":"info","ts":"2026-07-27T16:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c252fb7d21d02a1feea7fa157c2c487dbaebef482c836918a335ea4700b5954"} {"level":"info","ts":"2026-07-27T16:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/676ad4cd47a84f11d5878b2afbd739c8e5eb9630c4c94a7c484f057138041dd7"} {"level":"info","ts":"2026-07-27T16:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7cc625a2c5083044c7eeb51b6d5784856e589fd33499ca3667d44d49ffdf833f"} {"level":"info","ts":"2026-07-27T16:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6248c359059113b668a095390510bf6c68060c21944045c71557fa53e39cd84"} {"level":"debug","ts":"2026-07-27T16:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb93d89c1e1b3a8289b1c82f7bfb7ab0d88fbdfe18782c4db5ce8cbb82fc940","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb93d89c1e1b3a8289b1c82f7bfb7ab0d88fbdfe18782c4db5ce8cbb82fc940","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecb93d89c1e1b3a8289b1c82f7bfb7ab0d88fbdfe18782c4db5ce8cbb82fc940","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecb93d89c1e1b3a8289b1c82f7bfb7ab0d88fbdfe18782c4db5ce8cbb82fc940","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb93d89c1e1b3a8289b1c82f7bfb7ab0d88fbdfe18782c4db5ce8cbb82fc940"} {"level":"debug","ts":"2026-07-27T16:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecb93d89c1e1b3a8289b1c82f7bfb7ab0d88fbdfe18782c4db5ce8cbb82fc940","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb93d89c1e1b3a8289b1c82f7bfb7ab0d88fbdfe18782c4db5ce8cbb82fc940"} {"level":"debug","ts":"2026-07-27T16:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb93d89c1e1b3a8289b1c82f7bfb7ab0d88fbdfe18782c4db5ce8cbb82fc940","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecb93d89c1e1b3a8289b1c82f7bfb7ab0d88fbdfe18782c4db5ce8cbb82fc940"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb93d89c1e1b3a8289b1c82f7bfb7ab0d88fbdfe18782c4db5ce8cbb82fc940","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48bb475ab562df4ad43806be9c50629cf9a3e61f46978c7788f786a5d9b383cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48bb475ab562df4ad43806be9c50629cf9a3e61f46978c7788f786a5d9b383cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecb93d89c1e1b3a8289b1c82f7bfb7ab0d88fbdfe18782c4db5ce8cbb82fc940","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bb475ab562df4ad43806be9c50629cf9a3e61f46978c7788f786a5d9b383cf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48bb475ab562df4ad43806be9c50629cf9a3e61f46978c7788f786a5d9b383cf"} {"level":"debug","ts":"2026-07-27T16:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48bb475ab562df4ad43806be9c50629cf9a3e61f46978c7788f786a5d9b383cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48bb475ab562df4ad43806be9c50629cf9a3e61f46978c7788f786a5d9b383cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48bb475ab562df4ad43806be9c50629cf9a3e61f46978c7788f786a5d9b383cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bb475ab562df4ad43806be9c50629cf9a3e61f46978c7788f786a5d9b383cf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb93d89c1e1b3a8289b1c82f7bfb7ab0d88fbdfe18782c4db5ce8cbb82fc940"} {"level":"info","ts":"2026-07-27T16:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48bb475ab562df4ad43806be9c50629cf9a3e61f46978c7788f786a5d9b383cf"} {"level":"debug","ts":"2026-07-27T16:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f69d127fc874394232b97cb77e62c4947b7fa564f06c977a3aae2bfe7b015a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f69d127fc874394232b97cb77e62c4947b7fa564f06c977a3aae2bfe7b015a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f69d127fc874394232b97cb77e62c4947b7fa564f06c977a3aae2bfe7b015a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f69d127fc874394232b97cb77e62c4947b7fa564f06c977a3aae2bfe7b015a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f69d127fc874394232b97cb77e62c4947b7fa564f06c977a3aae2bfe7b015a1"} {"level":"debug","ts":"2026-07-27T16:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f69d127fc874394232b97cb77e62c4947b7fa564f06c977a3aae2bfe7b015a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f69d127fc874394232b97cb77e62c4947b7fa564f06c977a3aae2bfe7b015a1"} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f69d127fc874394232b97cb77e62c4947b7fa564f06c977a3aae2bfe7b015a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f69d127fc874394232b97cb77e62c4947b7fa564f06c977a3aae2bfe7b015a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f69d127fc874394232b97cb77e62c4947b7fa564f06c977a3aae2bfe7b015a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e19a2ad7d0371f0cf82c7c4ca4ec9990c4d6bf79959e5b2083e919754383196","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e19a2ad7d0371f0cf82c7c4ca4ec9990c4d6bf79959e5b2083e919754383196","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f69d127fc874394232b97cb77e62c4947b7fa564f06c977a3aae2bfe7b015a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e19a2ad7d0371f0cf82c7c4ca4ec9990c4d6bf79959e5b2083e919754383196","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e19a2ad7d0371f0cf82c7c4ca4ec9990c4d6bf79959e5b2083e919754383196"} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e19a2ad7d0371f0cf82c7c4ca4ec9990c4d6bf79959e5b2083e919754383196","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e19a2ad7d0371f0cf82c7c4ca4ec9990c4d6bf79959e5b2083e919754383196"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e19a2ad7d0371f0cf82c7c4ca4ec9990c4d6bf79959e5b2083e919754383196","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e19a2ad7d0371f0cf82c7c4ca4ec9990c4d6bf79959e5b2083e919754383196","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f69d127fc874394232b97cb77e62c4947b7fa564f06c977a3aae2bfe7b015a1"} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e19a2ad7d0371f0cf82c7c4ca4ec9990c4d6bf79959e5b2083e919754383196"} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50"} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50"} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50"} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83"} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83"} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83"} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b"} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83"} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b"} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4e7cc2233c66bf79cc643b4553d18353070944b0bf7fc102dd45fd29e005a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83"} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4e7cc2233c66bf79cc643b4553d18353070944b0bf7fc102dd45fd29e005a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b"} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4e7cc2233c66bf79cc643b4553d18353070944b0bf7fc102dd45fd29e005a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4e7cc2233c66bf79cc643b4553d18353070944b0bf7fc102dd45fd29e005a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4e7cc2233c66bf79cc643b4553d18353070944b0bf7fc102dd45fd29e005a7"} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4e7cc2233c66bf79cc643b4553d18353070944b0bf7fc102dd45fd29e005a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f4e7cc2233c66bf79cc643b4553d18353070944b0bf7fc102dd45fd29e005a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4e7cc2233c66bf79cc643b4553d18353070944b0bf7fc102dd45fd29e005a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b"} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4e7cc2233c66bf79cc643b4553d18353070944b0bf7fc102dd45fd29e005a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4e7cc2233c66bf79cc643b4553d18353070944b0bf7fc102dd45fd29e005a7"} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4e7cc2233c66bf79cc643b4553d18353070944b0bf7fc102dd45fd29e005a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ad5575b461baf79be9eb0b842f7e9d809ee834aad725736e79d5572fbfad06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ad5575b461baf79be9eb0b842f7e9d809ee834aad725736e79d5572fbfad06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f4e7cc2233c66bf79cc643b4553d18353070944b0bf7fc102dd45fd29e005a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f4e7cc2233c66bf79cc643b4553d18353070944b0bf7fc102dd45fd29e005a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b"} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f4e7cc2233c66bf79cc643b4553d18353070944b0bf7fc102dd45fd29e005a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4e7cc2233c66bf79cc643b4553d18353070944b0bf7fc102dd45fd29e005a7"} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ad5575b461baf79be9eb0b842f7e9d809ee834aad725736e79d5572fbfad06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ad5575b461baf79be9eb0b842f7e9d809ee834aad725736e79d5572fbfad06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f4e7cc2233c66bf79cc643b4553d18353070944b0bf7fc102dd45fd29e005a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ad5575b461baf79be9eb0b842f7e9d809ee834aad725736e79d5572fbfad06","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ad5575b461baf79be9eb0b842f7e9d809ee834aad725736e79d5572fbfad06"} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ad5575b461baf79be9eb0b842f7e9d809ee834aad725736e79d5572fbfad06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85ad5575b461baf79be9eb0b842f7e9d809ee834aad725736e79d5572fbfad06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ad5575b461baf79be9eb0b842f7e9d809ee834aad725736e79d5572fbfad06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ad5575b461baf79be9eb0b842f7e9d809ee834aad725736e79d5572fbfad06","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f4e7cc2233c66bf79cc643b4553d18353070944b0bf7fc102dd45fd29e005a7"} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b"} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aa1b18877546e47813d473a3160b0522ac761d1a1c49ff7c9dd81af49cdc2c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aa1b18877546e47813d473a3160b0522ac761d1a1c49ff7c9dd81af49cdc2c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5aa1b18877546e47813d473a3160b0522ac761d1a1c49ff7c9dd81af49cdc2c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5aa1b18877546e47813d473a3160b0522ac761d1a1c49ff7c9dd81af49cdc2c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ad5575b461baf79be9eb0b842f7e9d809ee834aad725736e79d5572fbfad06"} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aa1b18877546e47813d473a3160b0522ac761d1a1c49ff7c9dd81af49cdc2c5"} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aa1b18877546e47813d473a3160b0522ac761d1a1c49ff7c9dd81af49cdc2c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5aa1b18877546e47813d473a3160b0522ac761d1a1c49ff7c9dd81af49cdc2c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aa1b18877546e47813d473a3160b0522ac761d1a1c49ff7c9dd81af49cdc2c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5aa1b18877546e47813d473a3160b0522ac761d1a1c49ff7c9dd81af49cdc2c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aa1b18877546e47813d473a3160b0522ac761d1a1c49ff7c9dd81af49cdc2c5"} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9447c09076a31b0926507aa119b1be4b651c21316b7ebf73e9f53b8af3a4ce8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9447c09076a31b0926507aa119b1be4b651c21316b7ebf73e9f53b8af3a4ce8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9447c09076a31b0926507aa119b1be4b651c21316b7ebf73e9f53b8af3a4ce8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9447c09076a31b0926507aa119b1be4b651c21316b7ebf73e9f53b8af3a4ce8d"} {"level":"info","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9447c09076a31b0926507aa119b1be4b651c21316b7ebf73e9f53b8af3a4ce8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9447c09076a31b0926507aa119b1be4b651c21316b7ebf73e9f53b8af3a4ce8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9447c09076a31b0926507aa119b1be4b651c21316b7ebf73e9f53b8af3a4ce8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9447c09076a31b0926507aa119b1be4b651c21316b7ebf73e9f53b8af3a4ce8d"} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bc967d2ddacce256173dd1ac441df4a469aa536cdcc7deb591dcdef8200d13c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bc967d2ddacce256173dd1ac441df4a469aa536cdcc7deb591dcdef8200d13c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bc967d2ddacce256173dd1ac441df4a469aa536cdcc7deb591dcdef8200d13c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bc967d2ddacce256173dd1ac441df4a469aa536cdcc7deb591dcdef8200d13c"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bc967d2ddacce256173dd1ac441df4a469aa536cdcc7deb591dcdef8200d13c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9447c09076a31b0926507aa119b1be4b651c21316b7ebf73e9f53b8af3a4ce8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9447c09076a31b0926507aa119b1be4b651c21316b7ebf73e9f53b8af3a4ce8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9447c09076a31b0926507aa119b1be4b651c21316b7ebf73e9f53b8af3a4ce8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bc967d2ddacce256173dd1ac441df4a469aa536cdcc7deb591dcdef8200d13c"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bc967d2ddacce256173dd1ac441df4a469aa536cdcc7deb591dcdef8200d13c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bc967d2ddacce256173dd1ac441df4a469aa536cdcc7deb591dcdef8200d13c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bc967d2ddacce256173dd1ac441df4a469aa536cdcc7deb591dcdef8200d13c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9447c09076a31b0926507aa119b1be4b651c21316b7ebf73e9f53b8af3a4ce8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9447c09076a31b0926507aa119b1be4b651c21316b7ebf73e9f53b8af3a4ce8d"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9447c09076a31b0926507aa119b1be4b651c21316b7ebf73e9f53b8af3a4ce8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bc967d2ddacce256173dd1ac441df4a469aa536cdcc7deb591dcdef8200d13c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01d8664eb891d3af4414968690d04971b7f7f24353fd5a051d24972905618d03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01d8664eb891d3af4414968690d04971b7f7f24353fd5a051d24972905618d03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9447c09076a31b0926507aa119b1be4b651c21316b7ebf73e9f53b8af3a4ce8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9447c09076a31b0926507aa119b1be4b651c21316b7ebf73e9f53b8af3a4ce8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bc967d2ddacce256173dd1ac441df4a469aa536cdcc7deb591dcdef8200d13c"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01d8664eb891d3af4414968690d04971b7f7f24353fd5a051d24972905618d03"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9447c09076a31b0926507aa119b1be4b651c21316b7ebf73e9f53b8af3a4ce8d"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9447c09076a31b0926507aa119b1be4b651c21316b7ebf73e9f53b8af3a4ce8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6248c359059113b668a095390510bf6c68060c21944045c71557fa53e39cd84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6248c359059113b668a095390510bf6c68060c21944045c71557fa53e39cd84"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6248c359059113b668a095390510bf6c68060c21944045c71557fa53e39cd84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2b814aaa3da3d644d7936646e1266356c5997d2c238dcb8750e2970d32c8d56"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9447c09076a31b0926507aa119b1be4b651c21316b7ebf73e9f53b8af3a4ce8d"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/373bc580a596e404a3f088b6942c433680d83bf23627b83dbf721a5b16ffd35b"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fbbb143d7f95d1fe797b2ee2260fe1061d357f28f5f49ce562f329092f15f4"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fbb01da52b7c3fe41fbd0048a680868a125553ef095f88defd5679e7d3ae415"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01d8664eb891d3af4414968690d04971b7f7f24353fd5a051d24972905618d03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01d8664eb891d3af4414968690d04971b7f7f24353fd5a051d24972905618d03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6248c359059113b668a095390510bf6c68060c21944045c71557fa53e39cd84"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe58521abf7915c4849fadfd04532b946dd26537c68db639a0b4d718261c9c30"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01d8664eb891d3af4414968690d04971b7f7f24353fd5a051d24972905618d03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2b814aaa3da3d644d7936646e1266356c5997d2c238dcb8750e2970d32c8d56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2b814aaa3da3d644d7936646e1266356c5997d2c238dcb8750e2970d32c8d56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2b814aaa3da3d644d7936646e1266356c5997d2c238dcb8750e2970d32c8d56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9447c09076a31b0926507aa119b1be4b651c21316b7ebf73e9f53b8af3a4ce8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01d8664eb891d3af4414968690d04971b7f7f24353fd5a051d24972905618d03"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2b814aaa3da3d644d7936646e1266356c5997d2c238dcb8750e2970d32c8d56"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"373bc580a596e404a3f088b6942c433680d83bf23627b83dbf721a5b16ffd35b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["373bc580a596e404a3f088b6942c433680d83bf23627b83dbf721a5b16ffd35b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"373bc580a596e404a3f088b6942c433680d83bf23627b83dbf721a5b16ffd35b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77fbbb143d7f95d1fe797b2ee2260fe1061d357f28f5f49ce562f329092f15f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77fbbb143d7f95d1fe797b2ee2260fe1061d357f28f5f49ce562f329092f15f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/373bc580a596e404a3f088b6942c433680d83bf23627b83dbf721a5b16ffd35b"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77fbbb143d7f95d1fe797b2ee2260fe1061d357f28f5f49ce562f329092f15f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fbb01da52b7c3fe41fbd0048a680868a125553ef095f88defd5679e7d3ae415","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fbb01da52b7c3fe41fbd0048a680868a125553ef095f88defd5679e7d3ae415"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77fbbb143d7f95d1fe797b2ee2260fe1061d357f28f5f49ce562f329092f15f4"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fbb01da52b7c3fe41fbd0048a680868a125553ef095f88defd5679e7d3ae415","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6248c359059113b668a095390510bf6c68060c21944045c71557fa53e39cd84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6248c359059113b668a095390510bf6c68060c21944045c71557fa53e39cd84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fbb01da52b7c3fe41fbd0048a680868a125553ef095f88defd5679e7d3ae415"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6248c359059113b668a095390510bf6c68060c21944045c71557fa53e39cd84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe58521abf7915c4849fadfd04532b946dd26537c68db639a0b4d718261c9c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe58521abf7915c4849fadfd04532b946dd26537c68db639a0b4d718261c9c30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6248c359059113b668a095390510bf6c68060c21944045c71557fa53e39cd84"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe58521abf7915c4849fadfd04532b946dd26537c68db639a0b4d718261c9c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01d8664eb891d3af4414968690d04971b7f7f24353fd5a051d24972905618d03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2b814aaa3da3d644d7936646e1266356c5997d2c238dcb8750e2970d32c8d56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"373bc580a596e404a3f088b6942c433680d83bf23627b83dbf721a5b16ffd35b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77fbbb143d7f95d1fe797b2ee2260fe1061d357f28f5f49ce562f329092f15f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fbb01da52b7c3fe41fbd0048a680868a125553ef095f88defd5679e7d3ae415","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6248c359059113b668a095390510bf6c68060c21944045c71557fa53e39cd84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe58521abf7915c4849fadfd04532b946dd26537c68db639a0b4d718261c9c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe58521abf7915c4849fadfd04532b946dd26537c68db639a0b4d718261c9c30"} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe58521abf7915c4849fadfd04532b946dd26537c68db639a0b4d718261c9c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe58521abf7915c4849fadfd04532b946dd26537c68db639a0b4d718261c9c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe58521abf7915c4849fadfd04532b946dd26537c68db639a0b4d718261c9c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe58521abf7915c4849fadfd04532b946dd26537c68db639a0b4d718261c9c30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe58521abf7915c4849fadfd04532b946dd26537c68db639a0b4d718261c9c30"} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe58521abf7915c4849fadfd04532b946dd26537c68db639a0b4d718261c9c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe58521abf7915c4849fadfd04532b946dd26537c68db639a0b4d718261c9c30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe58521abf7915c4849fadfd04532b946dd26537c68db639a0b4d718261c9c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe58521abf7915c4849fadfd04532b946dd26537c68db639a0b4d718261c9c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:37:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe58521abf7915c4849fadfd04532b946dd26537c68db639a0b4d718261c9c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe58521abf7915c4849fadfd04532b946dd26537c68db639a0b4d718261c9c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe58521abf7915c4849fadfd04532b946dd26537c68db639a0b4d718261c9c30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe58521abf7915c4849fadfd04532b946dd26537c68db639a0b4d718261c9c30"} {"level":"debug","ts":"2026-07-27T16:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe58521abf7915c4849fadfd04532b946dd26537c68db639a0b4d718261c9c30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe58521abf7915c4849fadfd04532b946dd26537c68db639a0b4d718261c9c30"} {"level":"debug","ts":"2026-07-27T16:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe58521abf7915c4849fadfd04532b946dd26537c68db639a0b4d718261c9c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:37:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:37:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe58521abf7915c4849fadfd04532b946dd26537c68db639a0b4d718261c9c30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe58521abf7915c4849fadfd04532b946dd26537c68db639a0b4d718261c9c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe58521abf7915c4849fadfd04532b946dd26537c68db639a0b4d718261c9c30","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe58521abf7915c4849fadfd04532b946dd26537c68db639a0b4d718261c9c30"} {"level":"info","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4602ed14-2614-42f3-8000-af1de4555be1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58700","PortSpecifier":{"PortValue":58700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4602ed14-2614-42f3-8000-af1de4555be1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4602ed14-2614-42f3-8000-af1de4555be1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58700","PortSpecifier":{"PortValue":58700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170293,"nanos":569149344},"http":{"id":"4602ed14-2614-42f3-8000-af1de4555be1","method":"POST","headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4602ed14-2614-42f3-8000-af1de4555be1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4602ed14-2614-42f3-8000-af1de4555be1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"faf73f66-aa46-43d3-81db-704f750d99f3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"]}} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4602ed14-2614-42f3-8000-af1de4555be1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"faf73f66-aa46-43d3-81db-704f750d99f3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4602ed14-2614-42f3-8000-af1de4555be1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4602ed14-2614-42f3-8000-af1de4555be1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4602ed14-2614-42f3-8000-af1de4555be1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-932843/sub-test-model-932843\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4602ed14-2614-42f3-8000-af1de4555be1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4602ed14-2614-42f3-8000-af1de4555be1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4602ed14-2614-42f3-8000-af1de4555be1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4602ed14-2614-42f3-8000-af1de4555be1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4602ed14-2614-42f3-8000-af1de4555be1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"948c1c0f-2c4b-4f8c-8ef7-7c81fdde84c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54294","PortSpecifier":{"PortValue":54294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"948c1c0f-2c4b-4f8c-8ef7-7c81fdde84c3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"948c1c0f-2c4b-4f8c-8ef7-7c81fdde84c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54294","PortSpecifier":{"PortValue":54294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170293,"nanos":610239964},"http":{"id":"948c1c0f-2c4b-4f8c-8ef7-7c81fdde84c3","method":"POST","headers":{":authority":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"948c1c0f-2c4b-4f8c-8ef7-7c81fdde84c3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"948c1c0f-2c4b-4f8c-8ef7-7c81fdde84c3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"faf73f66-aa46-43d3-81db-704f750d99f3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"]}} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"948c1c0f-2c4b-4f8c-8ef7-7c81fdde84c3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"faf73f66-aa46-43d3-81db-704f750d99f3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"948c1c0f-2c4b-4f8c-8ef7-7c81fdde84c3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"948c1c0f-2c4b-4f8c-8ef7-7c81fdde84c3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"948c1c0f-2c4b-4f8c-8ef7-7c81fdde84c3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f21d6/sub-test-model-1f21d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f21d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"948c1c0f-2c4b-4f8c-8ef7-7c81fdde84c3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"948c1c0f-2c4b-4f8c-8ef7-7c81fdde84c3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"948c1c0f-2c4b-4f8c-8ef7-7c81fdde84c3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"948c1c0f-2c4b-4f8c-8ef7-7c81fdde84c3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"948c1c0f-2c4b-4f8c-8ef7-7c81fdde84c3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bcfe8d0-ee58-42d8-a746-05c28422adef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58704","PortSpecifier":{"PortValue":58704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0bcfe8d0-ee58-42d8-a746-05c28422adef","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bcfe8d0-ee58-42d8-a746-05c28422adef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58704","PortSpecifier":{"PortValue":58704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170293,"nanos":648474615},"http":{"id":"0bcfe8d0-ee58-42d8-a746-05c28422adef","method":"GET","headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0bcfe8d0-ee58-42d8-a746-05c28422adef","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Uyx6QbXNd3Y8QaMT_ncO1OK2CKqAKVaDmliZH76jetc7PKlWrE6jI9S1rZM4"} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0bcfe8d0-ee58-42d8-a746-05c28422adef","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Uyx6QbXNd3Y8QaMT_ncO1OK2CKqAKVaDmliZH76jetc7PKlWrE6jI9S1rZM4\"}"} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0bcfe8d0-ee58-42d8-a746-05c28422adef","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d0d8a8d5-934c-4710-9d9e-b5922d49e806","keyName":"e2e-sub-iso-393f8f","subscription":"e2e-a-only-d74be2","tenant":"e2e-shared-a-932843","userId":"d0d8a8d5-934c-4710-9d9e-b5922d49e806","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0bcfe8d0-ee58-42d8-a746-05c28422adef","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bcfe8d0-ee58-42d8-a746-05c28422adef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bcfe8d0-ee58-42d8-a746-05c28422adef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bcfe8d0-ee58-42d8-a746-05c28422adef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-932843/sub-test-model-932843\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bcfe8d0-ee58-42d8-a746-05c28422adef","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bcfe8d0-ee58-42d8-a746-05c28422adef","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-d74be2"} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bcfe8d0-ee58-42d8-a746-05c28422adef","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0bcfe8d0-ee58-42d8-a746-05c28422adef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bcfe8d0-ee58-42d8-a746-05c28422adef","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bcfe8d0-ee58-42d8-a746-05c28422adef","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b307683a-d0f4-405d-859e-a864193aeac9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54302","PortSpecifier":{"PortValue":54302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b307683a-d0f4-405d-859e-a864193aeac9","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b307683a-d0f4-405d-859e-a864193aeac9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54302","PortSpecifier":{"PortValue":54302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170293,"nanos":693709546},"http":{"id":"b307683a-d0f4-405d-859e-a864193aeac9","method":"GET","headers":{":authority":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b307683a-d0f4-405d-859e-a864193aeac9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xyAr3ap6fugloqRU_KfMOaRo8QB8sb7D48GVOe8Mv0lwfSP5SULISXVP8fBv"} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b307683a-d0f4-405d-859e-a864193aeac9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1f21d6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xyAr3ap6fugloqRU_KfMOaRo8QB8sb7D48GVOe8Mv0lwfSP5SULISXVP8fBv\"}"} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b307683a-d0f4-405d-859e-a864193aeac9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1f21d6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"db7b6352-5ee9-4db0-bc60-1c3ee4c002e4","keyName":"e2e-sub-iso-e39fb4","subscription":"e2e-b-only-d74be2","tenant":"e2e-shared-b-1f21d6","userId":"db7b6352-5ee9-4db0-bc60-1c3ee4c002e4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b307683a-d0f4-405d-859e-a864193aeac9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b307683a-d0f4-405d-859e-a864193aeac9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b307683a-d0f4-405d-859e-a864193aeac9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b307683a-d0f4-405d-859e-a864193aeac9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f21d6/sub-test-model-1f21d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f21d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b307683a-d0f4-405d-859e-a864193aeac9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b307683a-d0f4-405d-859e-a864193aeac9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b307683a-d0f4-405d-859e-a864193aeac9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-d74be2"} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b307683a-d0f4-405d-859e-a864193aeac9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b307683a-d0f4-405d-859e-a864193aeac9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:38:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b307683a-d0f4-405d-859e-a864193aeac9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5753a006-8089-44a9-9df9-aa16c14d8089","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46138","PortSpecifier":{"PortValue":46138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5753a006-8089-44a9-9df9-aa16c14d8089","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5753a006-8089-44a9-9df9-aa16c14d8089","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46138","PortSpecifier":{"PortValue":46138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170313,"nanos":390876057},"http":{"id":"5753a006-8089-44a9-9df9-aa16c14d8089","method":"POST","headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5753a006-8089-44a9-9df9-aa16c14d8089","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5753a006-8089-44a9-9df9-aa16c14d8089","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"faf73f66-aa46-43d3-81db-704f750d99f3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"]}} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5753a006-8089-44a9-9df9-aa16c14d8089","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"faf73f66-aa46-43d3-81db-704f750d99f3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5753a006-8089-44a9-9df9-aa16c14d8089","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5753a006-8089-44a9-9df9-aa16c14d8089","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5753a006-8089-44a9-9df9-aa16c14d8089","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-932843/sub-test-model-932843\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5753a006-8089-44a9-9df9-aa16c14d8089","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5753a006-8089-44a9-9df9-aa16c14d8089","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5753a006-8089-44a9-9df9-aa16c14d8089","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5753a006-8089-44a9-9df9-aa16c14d8089","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5753a006-8089-44a9-9df9-aa16c14d8089","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eeee4cd3-a779-4885-a655-939be79ffa73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39442","PortSpecifier":{"PortValue":39442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eeee4cd3-a779-4885-a655-939be79ffa73","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eeee4cd3-a779-4885-a655-939be79ffa73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39442","PortSpecifier":{"PortValue":39442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170313,"nanos":431483287},"http":{"id":"eeee4cd3-a779-4885-a655-939be79ffa73","method":"POST","headers":{":authority":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eeee4cd3-a779-4885-a655-939be79ffa73","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eeee4cd3-a779-4885-a655-939be79ffa73","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"faf73f66-aa46-43d3-81db-704f750d99f3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"]}} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eeee4cd3-a779-4885-a655-939be79ffa73","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"faf73f66-aa46-43d3-81db-704f750d99f3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eeee4cd3-a779-4885-a655-939be79ffa73","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eeee4cd3-a779-4885-a655-939be79ffa73","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eeee4cd3-a779-4885-a655-939be79ffa73","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f21d6/sub-test-model-1f21d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f21d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eeee4cd3-a779-4885-a655-939be79ffa73","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eeee4cd3-a779-4885-a655-939be79ffa73","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eeee4cd3-a779-4885-a655-939be79ffa73","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eeee4cd3-a779-4885-a655-939be79ffa73","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eeee4cd3-a779-4885-a655-939be79ffa73","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8e80689-a98c-45d9-9c1d-24078fc61a44","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46148","PortSpecifier":{"PortValue":46148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8e80689-a98c-45d9-9c1d-24078fc61a44","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8e80689-a98c-45d9-9c1d-24078fc61a44","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46148","PortSpecifier":{"PortValue":46148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170313,"nanos":468242041},"http":{"id":"c8e80689-a98c-45d9-9c1d-24078fc61a44","method":"POST","headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8e80689-a98c-45d9-9c1d-24078fc61a44","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZTBgKjQUXtpdOhCO_G4tGGuD5VIaQ7fp8k7rcBOP3gXc4xnqGDm43pQ0WDcf"} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8e80689-a98c-45d9-9c1d-24078fc61a44","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZTBgKjQUXtpdOhCO_G4tGGuD5VIaQ7fp8k7rcBOP3gXc4xnqGDm43pQ0WDcf\"}"} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8e80689-a98c-45d9-9c1d-24078fc61a44","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"58ff2a10-4fa9-40a6-8a46-6420bb0b7be7","keyName":"e2e-sub-iso-0947b1","subscription":"e2e-shared-sub-423013","tenant":"e2e-shared-a-932843","userId":"58ff2a10-4fa9-40a6-8a46-6420bb0b7be7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8e80689-a98c-45d9-9c1d-24078fc61a44","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8e80689-a98c-45d9-9c1d-24078fc61a44","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8e80689-a98c-45d9-9c1d-24078fc61a44","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8e80689-a98c-45d9-9c1d-24078fc61a44","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-932843/sub-test-model-932843\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8e80689-a98c-45d9-9c1d-24078fc61a44","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8e80689-a98c-45d9-9c1d-24078fc61a44","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-423013"} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8e80689-a98c-45d9-9c1d-24078fc61a44","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c8e80689-a98c-45d9-9c1d-24078fc61a44","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8e80689-a98c-45d9-9c1d-24078fc61a44","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8e80689-a98c-45d9-9c1d-24078fc61a44","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"436e97f8-2fab-492c-8731-8ecebb7ae4e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39456","PortSpecifier":{"PortValue":39456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"436e97f8-2fab-492c-8731-8ecebb7ae4e2","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"436e97f8-2fab-492c-8731-8ecebb7ae4e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39456","PortSpecifier":{"PortValue":39456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170313,"nanos":496967241},"http":{"id":"436e97f8-2fab-492c-8731-8ecebb7ae4e2","method":"POST","headers":{":authority":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"436e97f8-2fab-492c-8731-8ecebb7ae4e2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bfz0pSpDbLTDSDhA_7bu362PgXEhoWMtNpX5RrDT6Yoy5FVHd4F8akscWAOd"} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"436e97f8-2fab-492c-8731-8ecebb7ae4e2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1f21d6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bfz0pSpDbLTDSDhA_7bu362PgXEhoWMtNpX5RrDT6Yoy5FVHd4F8akscWAOd\"}"} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"436e97f8-2fab-492c-8731-8ecebb7ae4e2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1f21d6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"81395132-4695-4c3b-8df3-9885f1bc17ee","keyName":"e2e-sub-iso-bec948","subscription":"e2e-shared-sub-423013","tenant":"e2e-shared-b-1f21d6","userId":"81395132-4695-4c3b-8df3-9885f1bc17ee","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"436e97f8-2fab-492c-8731-8ecebb7ae4e2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"436e97f8-2fab-492c-8731-8ecebb7ae4e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"436e97f8-2fab-492c-8731-8ecebb7ae4e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"436e97f8-2fab-492c-8731-8ecebb7ae4e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f21d6/sub-test-model-1f21d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f21d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"436e97f8-2fab-492c-8731-8ecebb7ae4e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"436e97f8-2fab-492c-8731-8ecebb7ae4e2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"436e97f8-2fab-492c-8731-8ecebb7ae4e2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-423013"} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"436e97f8-2fab-492c-8731-8ecebb7ae4e2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"436e97f8-2fab-492c-8731-8ecebb7ae4e2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:38:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"436e97f8-2fab-492c-8731-8ecebb7ae4e2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"} {"level":"info","ts":"2026-07-27T16:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48bb475ab562df4ad43806be9c50629cf9a3e61f46978c7788f786a5d9b383cf"} {"level":"info","ts":"2026-07-27T16:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f69d127fc874394232b97cb77e62c4947b7fa564f06c977a3aae2bfe7b015a1"} {"level":"info","ts":"2026-07-27T16:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5aa1b18877546e47813d473a3160b0522ac761d1a1c49ff7c9dd81af49cdc2c5"} {"level":"info","ts":"2026-07-27T16:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87130e578d687a8412e22ab85c6553214a184b5ca29bb494d041ddfdfa59203b"} {"level":"info","ts":"2026-07-27T16:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/373bc580a596e404a3f088b6942c433680d83bf23627b83dbf721a5b16ffd35b"} {"level":"info","ts":"2026-07-27T16:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9447c09076a31b0926507aa119b1be4b651c21316b7ebf73e9f53b8af3a4ce8d"} {"level":"info","ts":"2026-07-27T16:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50"} {"level":"info","ts":"2026-07-27T16:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e19a2ad7d0371f0cf82c7c4ca4ec9990c4d6bf79959e5b2083e919754383196"} {"level":"info","ts":"2026-07-27T16:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6248c359059113b668a095390510bf6c68060c21944045c71557fa53e39cd84"} {"level":"info","ts":"2026-07-27T16:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01d8664eb891d3af4414968690d04971b7f7f24353fd5a051d24972905618d03"} {"level":"info","ts":"2026-07-27T16:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2b814aaa3da3d644d7936646e1266356c5997d2c238dcb8750e2970d32c8d56"} {"level":"info","ts":"2026-07-27T16:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecb93d89c1e1b3a8289b1c82f7bfb7ab0d88fbdfe18782c4db5ce8cbb82fc940"} {"level":"info","ts":"2026-07-27T16:38:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f4e7cc2233c66bf79cc643b4553d18353070944b0bf7fc102dd45fd29e005a7"} {"level":"info","ts":"2026-07-27T16:38:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b"} {"level":"info","ts":"2026-07-27T16:38:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"} {"level":"info","ts":"2026-07-27T16:38:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bc967d2ddacce256173dd1ac441df4a469aa536cdcc7deb591dcdef8200d13c"} {"level":"info","ts":"2026-07-27T16:38:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"} {"level":"info","ts":"2026-07-27T16:38:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77fbbb143d7f95d1fe797b2ee2260fe1061d357f28f5f49ce562f329092f15f4"} {"level":"info","ts":"2026-07-27T16:38:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83"} {"level":"info","ts":"2026-07-27T16:38:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85ad5575b461baf79be9eb0b842f7e9d809ee834aad725736e79d5572fbfad06"} {"level":"info","ts":"2026-07-27T16:38:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe58521abf7915c4849fadfd04532b946dd26537c68db639a0b4d718261c9c30"} {"level":"info","ts":"2026-07-27T16:38:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fbb01da52b7c3fe41fbd0048a680868a125553ef095f88defd5679e7d3ae415"} {"level":"info","ts":"2026-07-27T16:38:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"debug","ts":"2026-07-27T16:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50"} {"level":"debug","ts":"2026-07-27T16:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50"} {"level":"debug","ts":"2026-07-27T16:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50"} {"level":"debug","ts":"2026-07-27T16:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50"} {"level":"debug","ts":"2026-07-27T16:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50"} {"level":"debug","ts":"2026-07-27T16:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37fbb58c33513f575dbf0d22b3be98eea38dd91e131e877a02a33aeb70cecfde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37fbb58c33513f575dbf0d22b3be98eea38dd91e131e877a02a33aeb70cecfde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37fbb58c33513f575dbf0d22b3be98eea38dd91e131e877a02a33aeb70cecfde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37fbb58c33513f575dbf0d22b3be98eea38dd91e131e877a02a33aeb70cecfde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37fbb58c33513f575dbf0d22b3be98eea38dd91e131e877a02a33aeb70cecfde"} {"level":"debug","ts":"2026-07-27T16:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37fbb58c33513f575dbf0d22b3be98eea38dd91e131e877a02a33aeb70cecfde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37fbb58c33513f575dbf0d22b3be98eea38dd91e131e877a02a33aeb70cecfde"} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37fbb58c33513f575dbf0d22b3be98eea38dd91e131e877a02a33aeb70cecfde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37fbb58c33513f575dbf0d22b3be98eea38dd91e131e877a02a33aeb70cecfde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37fbb58c33513f575dbf0d22b3be98eea38dd91e131e877a02a33aeb70cecfde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37fbb58c33513f575dbf0d22b3be98eea38dd91e131e877a02a33aeb70cecfde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37fbb58c33513f575dbf0d22b3be98eea38dd91e131e877a02a33aeb70cecfde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79dd0c9e317b9aa59bc8042bd97b039ec2730e1add4880276ad76b1ec210478b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37fbb58c33513f575dbf0d22b3be98eea38dd91e131e877a02a33aeb70cecfde"} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79dd0c9e317b9aa59bc8042bd97b039ec2730e1add4880276ad76b1ec210478b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37fbb58c33513f575dbf0d22b3be98eea38dd91e131e877a02a33aeb70cecfde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37fbb58c33513f575dbf0d22b3be98eea38dd91e131e877a02a33aeb70cecfde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37fbb58c33513f575dbf0d22b3be98eea38dd91e131e877a02a33aeb70cecfde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f8314de7e6c827375bcfabc7feee47eeeedd144f68f305a3db284ced8a1db5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79dd0c9e317b9aa59bc8042bd97b039ec2730e1add4880276ad76b1ec210478b"} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f8314de7e6c827375bcfabc7feee47eeeedd144f68f305a3db284ced8a1db5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79dd0c9e317b9aa59bc8042bd97b039ec2730e1add4880276ad76b1ec210478b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79dd0c9e317b9aa59bc8042bd97b039ec2730e1add4880276ad76b1ec210478b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f8314de7e6c827375bcfabc7feee47eeeedd144f68f305a3db284ced8a1db5e"} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79dd0c9e317b9aa59bc8042bd97b039ec2730e1add4880276ad76b1ec210478b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37fbb58c33513f575dbf0d22b3be98eea38dd91e131e877a02a33aeb70cecfde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37fbb58c33513f575dbf0d22b3be98eea38dd91e131e877a02a33aeb70cecfde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f8314de7e6c827375bcfabc7feee47eeeedd144f68f305a3db284ced8a1db5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f8314de7e6c827375bcfabc7feee47eeeedd144f68f305a3db284ced8a1db5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37fbb58c33513f575dbf0d22b3be98eea38dd91e131e877a02a33aeb70cecfde"} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f8314de7e6c827375bcfabc7feee47eeeedd144f68f305a3db284ced8a1db5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79dd0c9e317b9aa59bc8042bd97b039ec2730e1add4880276ad76b1ec210478b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79dd0c9e317b9aa59bc8042bd97b039ec2730e1add4880276ad76b1ec210478b"} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79dd0c9e317b9aa59bc8042bd97b039ec2730e1add4880276ad76b1ec210478b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37fbb58c33513f575dbf0d22b3be98eea38dd91e131e877a02a33aeb70cecfde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37fbb58c33513f575dbf0d22b3be98eea38dd91e131e877a02a33aeb70cecfde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37fbb58c33513f575dbf0d22b3be98eea38dd91e131e877a02a33aeb70cecfde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f8314de7e6c827375bcfabc7feee47eeeedd144f68f305a3db284ced8a1db5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f8314de7e6c827375bcfabc7feee47eeeedd144f68f305a3db284ced8a1db5e"} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f8314de7e6c827375bcfabc7feee47eeeedd144f68f305a3db284ced8a1db5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79dd0c9e317b9aa59bc8042bd97b039ec2730e1add4880276ad76b1ec210478b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79dd0c9e317b9aa59bc8042bd97b039ec2730e1add4880276ad76b1ec210478b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37fbb58c33513f575dbf0d22b3be98eea38dd91e131e877a02a33aeb70cecfde"} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79dd0c9e317b9aa59bc8042bd97b039ec2730e1add4880276ad76b1ec210478b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37fbb58c33513f575dbf0d22b3be98eea38dd91e131e877a02a33aeb70cecfde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f8314de7e6c827375bcfabc7feee47eeeedd144f68f305a3db284ced8a1db5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f8314de7e6c827375bcfabc7feee47eeeedd144f68f305a3db284ced8a1db5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79dd0c9e317b9aa59bc8042bd97b039ec2730e1add4880276ad76b1ec210478b"} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f8314de7e6c827375bcfabc7feee47eeeedd144f68f305a3db284ced8a1db5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79dd0c9e317b9aa59bc8042bd97b039ec2730e1add4880276ad76b1ec210478b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f8314de7e6c827375bcfabc7feee47eeeedd144f68f305a3db284ced8a1db5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f8314de7e6c827375bcfabc7feee47eeeedd144f68f305a3db284ced8a1db5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f8314de7e6c827375bcfabc7feee47eeeedd144f68f305a3db284ced8a1db5e"} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f8314de7e6c827375bcfabc7feee47eeeedd144f68f305a3db284ced8a1db5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f8314de7e6c827375bcfabc7feee47eeeedd144f68f305a3db284ced8a1db5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79dd0c9e317b9aa59bc8042bd97b039ec2730e1add4880276ad76b1ec210478b"} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f8314de7e6c827375bcfabc7feee47eeeedd144f68f305a3db284ced8a1db5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6248c359059113b668a095390510bf6c68060c21944045c71557fa53e39cd84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6248c359059113b668a095390510bf6c68060c21944045c71557fa53e39cd84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f8314de7e6c827375bcfabc7feee47eeeedd144f68f305a3db284ced8a1db5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f8314de7e6c827375bcfabc7feee47eeeedd144f68f305a3db284ced8a1db5e"} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f8314de7e6c827375bcfabc7feee47eeeedd144f68f305a3db284ced8a1db5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6248c359059113b668a095390510bf6c68060c21944045c71557fa53e39cd84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6248c359059113b668a095390510bf6c68060c21944045c71557fa53e39cd84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6248c359059113b668a095390510bf6c68060c21944045c71557fa53e39cd84"} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f8314de7e6c827375bcfabc7feee47eeeedd144f68f305a3db284ced8a1db5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f8314de7e6c827375bcfabc7feee47eeeedd144f68f305a3db284ced8a1db5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f8314de7e6c827375bcfabc7feee47eeeedd144f68f305a3db284ced8a1db5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6248c359059113b668a095390510bf6c68060c21944045c71557fa53e39cd84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6248c359059113b668a095390510bf6c68060c21944045c71557fa53e39cd84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6248c359059113b668a095390510bf6c68060c21944045c71557fa53e39cd84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e72237b73de613efdee570c7d5a7222f9f92d34b49b3fac973d7fbb77e4a3311","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f8314de7e6c827375bcfabc7feee47eeeedd144f68f305a3db284ced8a1db5e"} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e72237b73de613efdee570c7d5a7222f9f92d34b49b3fac973d7fbb77e4a3311","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f8314de7e6c827375bcfabc7feee47eeeedd144f68f305a3db284ced8a1db5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b185774f00127da022fbb64204d2e3691ac559842f8baaf1067287b894509fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6248c359059113b668a095390510bf6c68060c21944045c71557fa53e39cd84"} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b185774f00127da022fbb64204d2e3691ac559842f8baaf1067287b894509fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6248c359059113b668a095390510bf6c68060c21944045c71557fa53e39cd84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e72237b73de613efdee570c7d5a7222f9f92d34b49b3fac973d7fbb77e4a3311","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e72237b73de613efdee570c7d5a7222f9f92d34b49b3fac973d7fbb77e4a3311","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b185774f00127da022fbb64204d2e3691ac559842f8baaf1067287b894509fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e72237b73de613efdee570c7d5a7222f9f92d34b49b3fac973d7fbb77e4a3311","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e72237b73de613efdee570c7d5a7222f9f92d34b49b3fac973d7fbb77e4a3311","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b185774f00127da022fbb64204d2e3691ac559842f8baaf1067287b894509fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e72237b73de613efdee570c7d5a7222f9f92d34b49b3fac973d7fbb77e4a3311"} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b185774f00127da022fbb64204d2e3691ac559842f8baaf1067287b894509fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e72237b73de613efdee570c7d5a7222f9f92d34b49b3fac973d7fbb77e4a3311","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e72237b73de613efdee570c7d5a7222f9f92d34b49b3fac973d7fbb77e4a3311"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b185774f00127da022fbb64204d2e3691ac559842f8baaf1067287b894509fe"} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e72237b73de613efdee570c7d5a7222f9f92d34b49b3fac973d7fbb77e4a3311","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e72237b73de613efdee570c7d5a7222f9f92d34b49b3fac973d7fbb77e4a3311","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b185774f00127da022fbb64204d2e3691ac559842f8baaf1067287b894509fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b185774f00127da022fbb64204d2e3691ac559842f8baaf1067287b894509fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b185774f00127da022fbb64204d2e3691ac559842f8baaf1067287b894509fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b185774f00127da022fbb64204d2e3691ac559842f8baaf1067287b894509fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f8314de7e6c827375bcfabc7feee47eeeedd144f68f305a3db284ced8a1db5e"} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e72237b73de613efdee570c7d5a7222f9f92d34b49b3fac973d7fbb77e4a3311"} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b185774f00127da022fbb64204d2e3691ac559842f8baaf1067287b894509fe"} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"} {"level":"error","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ccd964829c0b149cceb0aca55451a196471b7581d7ebafafb383cd5acf11618","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ccd964829c0b149cceb0aca55451a196471b7581d7ebafafb383cd5acf11618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ccd964829c0b149cceb0aca55451a196471b7581d7ebafafb383cd5acf11618","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ccd964829c0b149cceb0aca55451a196471b7581d7ebafafb383cd5acf11618"} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ccd964829c0b149cceb0aca55451a196471b7581d7ebafafb383cd5acf11618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ccd964829c0b149cceb0aca55451a196471b7581d7ebafafb383cd5acf11618","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ccd964829c0b149cceb0aca55451a196471b7581d7ebafafb383cd5acf11618"} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5386d18e5209389d2fa1430c1a5385f0d05ce16ad7dda27f6ab731a5198c5ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5386d18e5209389d2fa1430c1a5385f0d05ce16ad7dda27f6ab731a5198c5ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ccd964829c0b149cceb0aca55451a196471b7581d7ebafafb383cd5acf11618","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ccd964829c0b149cceb0aca55451a196471b7581d7ebafafb383cd5acf11618"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ccd964829c0b149cceb0aca55451a196471b7581d7ebafafb383cd5acf11618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5386d18e5209389d2fa1430c1a5385f0d05ce16ad7dda27f6ab731a5198c5ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5386d18e5209389d2fa1430c1a5385f0d05ce16ad7dda27f6ab731a5198c5ba"} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5386d18e5209389d2fa1430c1a5385f0d05ce16ad7dda27f6ab731a5198c5ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ccd964829c0b149cceb0aca55451a196471b7581d7ebafafb383cd5acf11618","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ccd964829c0b149cceb0aca55451a196471b7581d7ebafafb383cd5acf11618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5386d18e5209389d2fa1430c1a5385f0d05ce16ad7dda27f6ab731a5198c5ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5386d18e5209389d2fa1430c1a5385f0d05ce16ad7dda27f6ab731a5198c5ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ccd964829c0b149cceb0aca55451a196471b7581d7ebafafb383cd5acf11618"} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5386d18e5209389d2fa1430c1a5385f0d05ce16ad7dda27f6ab731a5198c5ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ccd964829c0b149cceb0aca55451a196471b7581d7ebafafb383cd5acf11618","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ccd964829c0b149cceb0aca55451a196471b7581d7ebafafb383cd5acf11618"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5386d18e5209389d2fa1430c1a5385f0d05ce16ad7dda27f6ab731a5198c5ba"} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ccd964829c0b149cceb0aca55451a196471b7581d7ebafafb383cd5acf11618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5386d18e5209389d2fa1430c1a5385f0d05ce16ad7dda27f6ab731a5198c5ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ccd964829c0b149cceb0aca55451a196471b7581d7ebafafb383cd5acf11618","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ccd964829c0b149cceb0aca55451a196471b7581d7ebafafb383cd5acf11618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ccd964829c0b149cceb0aca55451a196471b7581d7ebafafb383cd5acf11618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29a0ee8fcebc065661b7e94d890fc927dd1247eb82e13b8ca47b07ca795a01e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ccd964829c0b149cceb0aca55451a196471b7581d7ebafafb383cd5acf11618"} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29a0ee8fcebc065661b7e94d890fc927dd1247eb82e13b8ca47b07ca795a01e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ccd964829c0b149cceb0aca55451a196471b7581d7ebafafb383cd5acf11618","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ccd964829c0b149cceb0aca55451a196471b7581d7ebafafb383cd5acf11618"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5386d18e5209389d2fa1430c1a5385f0d05ce16ad7dda27f6ab731a5198c5ba"} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ccd964829c0b149cceb0aca55451a196471b7581d7ebafafb383cd5acf11618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29a0ee8fcebc065661b7e94d890fc927dd1247eb82e13b8ca47b07ca795a01e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29a0ee8fcebc065661b7e94d890fc927dd1247eb82e13b8ca47b07ca795a01e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ccd964829c0b149cceb0aca55451a196471b7581d7ebafafb383cd5acf11618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29a0ee8fcebc065661b7e94d890fc927dd1247eb82e13b8ca47b07ca795a01e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29a0ee8fcebc065661b7e94d890fc927dd1247eb82e13b8ca47b07ca795a01e0"} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29a0ee8fcebc065661b7e94d890fc927dd1247eb82e13b8ca47b07ca795a01e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29a0ee8fcebc065661b7e94d890fc927dd1247eb82e13b8ca47b07ca795a01e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29a0ee8fcebc065661b7e94d890fc927dd1247eb82e13b8ca47b07ca795a01e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ccd964829c0b149cceb0aca55451a196471b7581d7ebafafb383cd5acf11618"} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29a0ee8fcebc065661b7e94d890fc927dd1247eb82e13b8ca47b07ca795a01e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29a0ee8fcebc065661b7e94d890fc927dd1247eb82e13b8ca47b07ca795a01e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29a0ee8fcebc065661b7e94d890fc927dd1247eb82e13b8ca47b07ca795a01e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29a0ee8fcebc065661b7e94d890fc927dd1247eb82e13b8ca47b07ca795a01e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29a0ee8fcebc065661b7e94d890fc927dd1247eb82e13b8ca47b07ca795a01e0"} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b8c8c4f5146430c3771f22ef9b6e8b9b27d7b30d5acdadaba06e2b521aee6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29a0ee8fcebc065661b7e94d890fc927dd1247eb82e13b8ca47b07ca795a01e0"} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b8c8c4f5146430c3771f22ef9b6e8b9b27d7b30d5acdadaba06e2b521aee6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29a0ee8fcebc065661b7e94d890fc927dd1247eb82e13b8ca47b07ca795a01e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29a0ee8fcebc065661b7e94d890fc927dd1247eb82e13b8ca47b07ca795a01e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8c8c4f5146430c3771f22ef9b6e8b9b27d7b30d5acdadaba06e2b521aee6d"} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29a0ee8fcebc065661b7e94d890fc927dd1247eb82e13b8ca47b07ca795a01e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a722f0098cd78af304aadf071fc87744f29aae2565e4335042a4c5853b9eaa79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a722f0098cd78af304aadf071fc87744f29aae2565e4335042a4c5853b9eaa79"} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb80f801d4732ab34d8ac55be487434299be402d1236a6ba4147abcac0676a22"} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8c8c4f5146430c3771f22ef9b6e8b9b27d7b30d5acdadaba06e2b521aee6d"} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a722f0098cd78af304aadf071fc87744f29aae2565e4335042a4c5853b9eaa79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26b8c8c4f5146430c3771f22ef9b6e8b9b27d7b30d5acdadaba06e2b521aee6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26b8c8c4f5146430c3771f22ef9b6e8b9b27d7b30d5acdadaba06e2b521aee6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29a0ee8fcebc065661b7e94d890fc927dd1247eb82e13b8ca47b07ca795a01e0"} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a722f0098cd78af304aadf071fc87744f29aae2565e4335042a4c5853b9eaa79"} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26b8c8c4f5146430c3771f22ef9b6e8b9b27d7b30d5acdadaba06e2b521aee6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb80f801d4732ab34d8ac55be487434299be402d1236a6ba4147abcac0676a22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb80f801d4732ab34d8ac55be487434299be402d1236a6ba4147abcac0676a22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/617f25290c21f61745e1c1f8cf16e002c802b8450d8d7854c2cda39a9cf51e01"} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/115949c32f7516de5bfe9a54bef9fdee2e74ed3649078f3e4c69fb85e7d246fb"} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e86801b8d0f400536d75c8b2d9f113a7f51b776cbf18da9deb2017f1d97cdb62"} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb80f801d4732ab34d8ac55be487434299be402d1236a6ba4147abcac0676a22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29a0ee8fcebc065661b7e94d890fc927dd1247eb82e13b8ca47b07ca795a01e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a722f0098cd78af304aadf071fc87744f29aae2565e4335042a4c5853b9eaa79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a722f0098cd78af304aadf071fc87744f29aae2565e4335042a4c5853b9eaa79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83"} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26b8c8c4f5146430c3771f22ef9b6e8b9b27d7b30d5acdadaba06e2b521aee6d"} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a722f0098cd78af304aadf071fc87744f29aae2565e4335042a4c5853b9eaa79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"617f25290c21f61745e1c1f8cf16e002c802b8450d8d7854c2cda39a9cf51e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["617f25290c21f61745e1c1f8cf16e002c802b8450d8d7854c2cda39a9cf51e01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb80f801d4732ab34d8ac55be487434299be402d1236a6ba4147abcac0676a22"} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b"} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"617f25290c21f61745e1c1f8cf16e002c802b8450d8d7854c2cda39a9cf51e01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"115949c32f7516de5bfe9a54bef9fdee2e74ed3649078f3e4c69fb85e7d246fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["115949c32f7516de5bfe9a54bef9fdee2e74ed3649078f3e4c69fb85e7d246fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a04d7ce37a2d0ed5ae4267acdd4b30037269119355ea7cdca6f41c32dd72be4"} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a182ee3721c47c42891b7271d9939e9d809e355480ab2597b36353a115028ed"} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"115949c32f7516de5bfe9a54bef9fdee2e74ed3649078f3e4c69fb85e7d246fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e86801b8d0f400536d75c8b2d9f113a7f51b776cbf18da9deb2017f1d97cdb62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e86801b8d0f400536d75c8b2d9f113a7f51b776cbf18da9deb2017f1d97cdb62"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a722f0098cd78af304aadf071fc87744f29aae2565e4335042a4c5853b9eaa79"} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/617f25290c21f61745e1c1f8cf16e002c802b8450d8d7854c2cda39a9cf51e01"} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e86801b8d0f400536d75c8b2d9f113a7f51b776cbf18da9deb2017f1d97cdb62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/115949c32f7516de5bfe9a54bef9fdee2e74ed3649078f3e4c69fb85e7d246fb"} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e86801b8d0f400536d75c8b2d9f113a7f51b776cbf18da9deb2017f1d97cdb62"} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26b8c8c4f5146430c3771f22ef9b6e8b9b27d7b30d5acdadaba06e2b521aee6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83"} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb80f801d4732ab34d8ac55be487434299be402d1236a6ba4147abcac0676a22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a04d7ce37a2d0ed5ae4267acdd4b30037269119355ea7cdca6f41c32dd72be4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a04d7ce37a2d0ed5ae4267acdd4b30037269119355ea7cdca6f41c32dd72be4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b"} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a04d7ce37a2d0ed5ae4267acdd4b30037269119355ea7cdca6f41c32dd72be4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a182ee3721c47c42891b7271d9939e9d809e355480ab2597b36353a115028ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a182ee3721c47c42891b7271d9939e9d809e355480ab2597b36353a115028ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a04d7ce37a2d0ed5ae4267acdd4b30037269119355ea7cdca6f41c32dd72be4"} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a182ee3721c47c42891b7271d9939e9d809e355480ab2597b36353a115028ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a722f0098cd78af304aadf071fc87744f29aae2565e4335042a4c5853b9eaa79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a182ee3721c47c42891b7271d9939e9d809e355480ab2597b36353a115028ed"} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"617f25290c21f61745e1c1f8cf16e002c802b8450d8d7854c2cda39a9cf51e01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"115949c32f7516de5bfe9a54bef9fdee2e74ed3649078f3e4c69fb85e7d246fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e86801b8d0f400536d75c8b2d9f113a7f51b776cbf18da9deb2017f1d97cdb62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a04d7ce37a2d0ed5ae4267acdd4b30037269119355ea7cdca6f41c32dd72be4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a182ee3721c47c42891b7271d9939e9d809e355480ab2597b36353a115028ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"} {"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"} {"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"} {"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"} {"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"} {"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"} {"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"} {"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"} {"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:39:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"} {"level":"error","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:39:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77dace01-b29b-4e14-be5b-4b0f1adada52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43958","PortSpecifier":{"PortValue":43958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77dace01-b29b-4e14-be5b-4b0f1adada52","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77dace01-b29b-4e14-be5b-4b0f1adada52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43958","PortSpecifier":{"PortValue":43958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170403,"nanos":209790678},"http":{"id":"77dace01-b29b-4e14-be5b-4b0f1adada52","method":"POST","headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"77dace01-b29b-4e14-be5b-4b0f1adada52","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77dace01-b29b-4e14-be5b-4b0f1adada52","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"faf73f66-aa46-43d3-81db-704f750d99f3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"]}} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77dace01-b29b-4e14-be5b-4b0f1adada52","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"faf73f66-aa46-43d3-81db-704f750d99f3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77dace01-b29b-4e14-be5b-4b0f1adada52","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77dace01-b29b-4e14-be5b-4b0f1adada52","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77dace01-b29b-4e14-be5b-4b0f1adada52","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-932843/rate-test-model-932843\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"77dace01-b29b-4e14-be5b-4b0f1adada52","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77dace01-b29b-4e14-be5b-4b0f1adada52","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77dace01-b29b-4e14-be5b-4b0f1adada52","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77dace01-b29b-4e14-be5b-4b0f1adada52","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77dace01-b29b-4e14-be5b-4b0f1adada52","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93976cfc-fc0d-413f-b410-df3f2c454aef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45640","PortSpecifier":{"PortValue":45640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"93976cfc-fc0d-413f-b410-df3f2c454aef","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93976cfc-fc0d-413f-b410-df3f2c454aef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:45640","PortSpecifier":{"PortValue":45640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170403,"nanos":260048955},"http":{"id":"93976cfc-fc0d-413f-b410-df3f2c454aef","method":"POST","headers":{":authority":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"93976cfc-fc0d-413f-b410-df3f2c454aef","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"93976cfc-fc0d-413f-b410-df3f2c454aef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"faf73f66-aa46-43d3-81db-704f750d99f3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"]}} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"93976cfc-fc0d-413f-b410-df3f2c454aef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"faf73f66-aa46-43d3-81db-704f750d99f3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93976cfc-fc0d-413f-b410-df3f2c454aef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93976cfc-fc0d-413f-b410-df3f2c454aef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93976cfc-fc0d-413f-b410-df3f2c454aef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f21d6/rate-test-model-1f21d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f21d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"93976cfc-fc0d-413f-b410-df3f2c454aef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93976cfc-fc0d-413f-b410-df3f2c454aef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93976cfc-fc0d-413f-b410-df3f2c454aef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93976cfc-fc0d-413f-b410-df3f2c454aef","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93976cfc-fc0d-413f-b410-df3f2c454aef","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43970","PortSpecifier":{"PortValue":43970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03741ff7-ab51-4a3f-a27c-244b8c938311","method":"POST","path":"/ai-tenant-e2e-shared-a-932843/rate-test-model-932843/v1/completions","host":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43970","PortSpecifier":{"PortValue":43970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170403,"nanos":309667179},"http":{"id":"03741ff7-ab51-4a3f-a27c-244b8c938311","method":"POST","headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-932843/rate-test-model-932843/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ep9P9Zm1dm9nxjhj_r56PYEkqwzSNXkwIeAkqcYrlaBp27qyp75UyDiJVDXt"} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ep9P9Zm1dm9nxjhj_r56PYEkqwzSNXkwIeAkqcYrlaBp27qyp75UyDiJVDXt\"}"} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"01d08be5-09c1-4d94-b002-453c28ac524c","keyName":"e2e-rate-a-2aac43","subscription":"e2e-rate-iso-a-2aac43","tenant":"e2e-shared-a-932843","userId":"01d08be5-09c1-4d94-b002-453c28ac524c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-932843/rate-test-model-932843\",\"requestedSubscription\":\"e2e-rate-iso-a-2aac43\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m","name":"rate-test-model-932843","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2aac43","namespace":"ai-tenant-e2e-shared-a-932843","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-932843/rate-test-model-932843"}} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-932843/rate-test-model-932843\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2aac43"} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"01d08be5-09c1-4d94-b002-453c28ac524c","keyName":"e2e-rate-a-2aac43","selected_subscription":"e2e-rate-iso-a-2aac43","selected_subscription_key":"ai-tenant-e2e-shared-a-932843/e2e-rate-iso-a-2aac43@ai-tenant-e2e-shared-a-932843/rate-test-model-932843","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m","name":"rate-test-model-932843","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2aac43","namespace":"ai-tenant-e2e-shared-a-932843","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-932843/rate-test-model-932843"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:40:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03741ff7-ab51-4a3f-a27c-244b8c938311","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c8ad599-143a-451e-9270-19d01af9a598","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43980","PortSpecifier":{"PortValue":43980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c8ad599-143a-451e-9270-19d01af9a598","method":"POST","path":"/ai-tenant-e2e-shared-a-932843/rate-test-model-932843/v1/completions","host":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c8ad599-143a-451e-9270-19d01af9a598","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43980","PortSpecifier":{"PortValue":43980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170404,"nanos":399772934},"http":{"id":"0c8ad599-143a-451e-9270-19d01af9a598","method":"POST","headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-932843/rate-test-model-932843/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c8ad599-143a-451e-9270-19d01af9a598","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ep9P9Zm1dm9nxjhj_r56PYEkqwzSNXkwIeAkqcYrlaBp27qyp75UyDiJVDXt"} {"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0c8ad599-143a-451e-9270-19d01af9a598","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ep9P9Zm1dm9nxjhj_r56PYEkqwzSNXkwIeAkqcYrlaBp27qyp75UyDiJVDXt\"}"} {"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0c8ad599-143a-451e-9270-19d01af9a598","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"01d08be5-09c1-4d94-b002-453c28ac524c","keyName":"e2e-rate-a-2aac43","subscription":"e2e-rate-iso-a-2aac43","tenant":"e2e-shared-a-932843","userId":"01d08be5-09c1-4d94-b002-453c28ac524c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0c8ad599-143a-451e-9270-19d01af9a598","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-932843/rate-test-model-932843\",\"requestedSubscription\":\"e2e-rate-iso-a-2aac43\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0c8ad599-143a-451e-9270-19d01af9a598","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m","name":"rate-test-model-932843","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2aac43","namespace":"ai-tenant-e2e-shared-a-932843","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-932843/rate-test-model-932843"}} {"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c8ad599-143a-451e-9270-19d01af9a598","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c8ad599-143a-451e-9270-19d01af9a598","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c8ad599-143a-451e-9270-19d01af9a598","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c8ad599-143a-451e-9270-19d01af9a598","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-932843/rate-test-model-932843\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c8ad599-143a-451e-9270-19d01af9a598","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c8ad599-143a-451e-9270-19d01af9a598","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c8ad599-143a-451e-9270-19d01af9a598","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c8ad599-143a-451e-9270-19d01af9a598","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2aac43"} {"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c8ad599-143a-451e-9270-19d01af9a598","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"01d08be5-09c1-4d94-b002-453c28ac524c","keyName":"e2e-rate-a-2aac43","selected_subscription":"e2e-rate-iso-a-2aac43","selected_subscription_key":"ai-tenant-e2e-shared-a-932843/e2e-rate-iso-a-2aac43@ai-tenant-e2e-shared-a-932843/rate-test-model-932843","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m","name":"rate-test-model-932843","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2aac43","namespace":"ai-tenant-e2e-shared-a-932843","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-932843/rate-test-model-932843"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c8ad599-143a-451e-9270-19d01af9a598","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:40:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c8ad599-143a-451e-9270-19d01af9a598","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43992","PortSpecifier":{"PortValue":43992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","method":"POST","path":"/ai-tenant-e2e-shared-a-932843/rate-test-model-932843/v1/completions","host":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43992","PortSpecifier":{"PortValue":43992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170405,"nanos":454468322},"http":{"id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","method":"POST","headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-932843/rate-test-model-932843/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ep9P9Zm1dm9nxjhj_r56PYEkqwzSNXkwIeAkqcYrlaBp27qyp75UyDiJVDXt"} {"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ep9P9Zm1dm9nxjhj_r56PYEkqwzSNXkwIeAkqcYrlaBp27qyp75UyDiJVDXt\"}"} {"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"01d08be5-09c1-4d94-b002-453c28ac524c","keyName":"e2e-rate-a-2aac43","subscription":"e2e-rate-iso-a-2aac43","tenant":"e2e-shared-a-932843","userId":"01d08be5-09c1-4d94-b002-453c28ac524c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-932843/rate-test-model-932843\",\"requestedSubscription\":\"e2e-rate-iso-a-2aac43\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m","name":"rate-test-model-932843","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2aac43","namespace":"ai-tenant-e2e-shared-a-932843","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-932843/rate-test-model-932843"}} {"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-932843/rate-test-model-932843\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2aac43"} {"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"01d08be5-09c1-4d94-b002-453c28ac524c","keyName":"e2e-rate-a-2aac43","selected_subscription":"e2e-rate-iso-a-2aac43","selected_subscription_key":"ai-tenant-e2e-shared-a-932843/e2e-rate-iso-a-2aac43@ai-tenant-e2e-shared-a-932843/rate-test-model-932843","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m","name":"rate-test-model-932843","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2aac43","namespace":"ai-tenant-e2e-shared-a-932843","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-932843/rate-test-model-932843"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:40:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"590bb7ea-8f6b-4729-bddb-a5d61d9f9174","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97cd6ca5-4629-4581-9410-7a1453154c80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43558","PortSpecifier":{"PortValue":43558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97cd6ca5-4629-4581-9410-7a1453154c80","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97cd6ca5-4629-4581-9410-7a1453154c80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43558","PortSpecifier":{"PortValue":43558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170431,"nanos":944207920},"http":{"id":"97cd6ca5-4629-4581-9410-7a1453154c80","method":"POST","headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"97cd6ca5-4629-4581-9410-7a1453154c80","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97cd6ca5-4629-4581-9410-7a1453154c80","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"faf73f66-aa46-43d3-81db-704f750d99f3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"]}} {"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97cd6ca5-4629-4581-9410-7a1453154c80","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"faf73f66-aa46-43d3-81db-704f750d99f3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.77:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97cd6ca5-4629-4581-9410-7a1453154c80","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97cd6ca5-4629-4581-9410-7a1453154c80","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97cd6ca5-4629-4581-9410-7a1453154c80","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-932843/rate-test-model-932843\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"97cd6ca5-4629-4581-9410-7a1453154c80","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97cd6ca5-4629-4581-9410-7a1453154c80","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97cd6ca5-4629-4581-9410-7a1453154c80","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97cd6ca5-4629-4581-9410-7a1453154c80","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97cd6ca5-4629-4581-9410-7a1453154c80","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57819ad2-5f22-4228-b459-2770000d249a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57562","PortSpecifier":{"PortValue":57562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57819ad2-5f22-4228-b459-2770000d249a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57819ad2-5f22-4228-b459-2770000d249a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57562","PortSpecifier":{"PortValue":57562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170431,"nanos":987800014},"http":{"id":"57819ad2-5f22-4228-b459-2770000d249a","method":"POST","headers":{":authority":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"57819ad2-5f22-4228-b459-2770000d249a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57819ad2-5f22-4228-b459-2770000d249a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"faf73f66-aa46-43d3-81db-704f750d99f3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"]}} {"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57819ad2-5f22-4228-b459-2770000d249a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"faf73f66-aa46-43d3-81db-704f750d99f3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57819ad2-5f22-4228-b459-2770000d249a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57819ad2-5f22-4228-b459-2770000d249a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57819ad2-5f22-4228-b459-2770000d249a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f21d6/rate-test-model-1f21d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f21d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"57819ad2-5f22-4228-b459-2770000d249a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57819ad2-5f22-4228-b459-2770000d249a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57819ad2-5f22-4228-b459-2770000d249a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57819ad2-5f22-4228-b459-2770000d249a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:40:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57819ad2-5f22-4228-b459-2770000d249a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43570","PortSpecifier":{"PortValue":43570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","method":"POST","path":"/ai-tenant-e2e-shared-a-932843/rate-test-model-932843/v1/completions","host":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43570","PortSpecifier":{"PortValue":43570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170432,"nanos":26028751},"http":{"id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","method":"POST","headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-932843/rate-test-model-932843/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MAS4lxa5BJwpKvMx_EZCDHD1I6Kwuc2qhM1hiPzXbERH0MnLcQq2AupaxVvQ"} {"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MAS4lxa5BJwpKvMx_EZCDHD1I6Kwuc2qhM1hiPzXbERH0MnLcQq2AupaxVvQ\"}"} {"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"04774c05-24e8-4a14-b17e-ba9cc2c03a3b","keyName":"e2e-rate-a-5d2cc1","subscription":"e2e-rate-iso-a-5d2cc1","tenant":"e2e-shared-a-932843","userId":"04774c05-24e8-4a14-b17e-ba9cc2c03a3b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-932843/rate-test-model-932843\",\"requestedSubscription\":\"e2e-rate-iso-a-5d2cc1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m","name":"rate-test-model-932843","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5d2cc1","namespace":"ai-tenant-e2e-shared-a-932843","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-932843/rate-test-model-932843"}} {"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-932843/rate-test-model-932843\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5d2cc1"} {"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"04774c05-24e8-4a14-b17e-ba9cc2c03a3b","keyName":"e2e-rate-a-5d2cc1","selected_subscription":"e2e-rate-iso-a-5d2cc1","selected_subscription_key":"ai-tenant-e2e-shared-a-932843/e2e-rate-iso-a-5d2cc1@ai-tenant-e2e-shared-a-932843/rate-test-model-932843","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m","name":"rate-test-model-932843","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5d2cc1","namespace":"ai-tenant-e2e-shared-a-932843","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-932843/rate-test-model-932843"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:40:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a2fb2db-f8f7-4d73-be3a-e91e1fbe1005","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46184","PortSpecifier":{"PortValue":46184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"caa73916-ee60-46d9-920c-9f9675ce05b4","method":"POST","path":"/ai-tenant-e2e-shared-a-932843/rate-test-model-932843/v1/completions","host":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46184","PortSpecifier":{"PortValue":46184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170433,"nanos":71132632},"http":{"id":"caa73916-ee60-46d9-920c-9f9675ce05b4","method":"POST","headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-932843/rate-test-model-932843/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MAS4lxa5BJwpKvMx_EZCDHD1I6Kwuc2qhM1hiPzXbERH0MnLcQq2AupaxVvQ"} {"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MAS4lxa5BJwpKvMx_EZCDHD1I6Kwuc2qhM1hiPzXbERH0MnLcQq2AupaxVvQ\"}"} {"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"04774c05-24e8-4a14-b17e-ba9cc2c03a3b","keyName":"e2e-rate-a-5d2cc1","subscription":"e2e-rate-iso-a-5d2cc1","tenant":"e2e-shared-a-932843","userId":"04774c05-24e8-4a14-b17e-ba9cc2c03a3b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-932843/rate-test-model-932843\",\"requestedSubscription\":\"e2e-rate-iso-a-5d2cc1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m","name":"rate-test-model-932843","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5d2cc1","namespace":"ai-tenant-e2e-shared-a-932843","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-932843/rate-test-model-932843"}} {"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-932843/rate-test-model-932843\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5d2cc1"} {"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"04774c05-24e8-4a14-b17e-ba9cc2c03a3b","keyName":"e2e-rate-a-5d2cc1","selected_subscription":"e2e-rate-iso-a-5d2cc1","selected_subscription_key":"ai-tenant-e2e-shared-a-932843/e2e-rate-iso-a-5d2cc1@ai-tenant-e2e-shared-a-932843/rate-test-model-932843","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m","name":"rate-test-model-932843","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5d2cc1","namespace":"ai-tenant-e2e-shared-a-932843","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-932843/rate-test-model-932843"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"caa73916-ee60-46d9-920c-9f9675ce05b4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46200","PortSpecifier":{"PortValue":46200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8713a217-dfe0-44cf-9024-f294d46f36fb","method":"POST","path":"/ai-tenant-e2e-shared-a-932843/rate-test-model-932843/v1/completions","host":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46200","PortSpecifier":{"PortValue":46200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.77:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170434,"nanos":112563641},"http":{"id":"8713a217-dfe0-44cf-9024-f294d46f36fb","method":"POST","headers":{":authority":"e2e-shared-a-932843.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-932843/rate-test-model-932843/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MAS4lxa5BJwpKvMx_EZCDHD1I6Kwuc2qhM1hiPzXbERH0MnLcQq2AupaxVvQ"} {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MAS4lxa5BJwpKvMx_EZCDHD1I6Kwuc2qhM1hiPzXbERH0MnLcQq2AupaxVvQ\"}"} {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"04774c05-24e8-4a14-b17e-ba9cc2c03a3b","keyName":"e2e-rate-a-5d2cc1","subscription":"e2e-rate-iso-a-5d2cc1","tenant":"e2e-shared-a-932843","userId":"04774c05-24e8-4a14-b17e-ba9cc2c03a3b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-932843/rate-test-model-932843\",\"requestedSubscription\":\"e2e-rate-iso-a-5d2cc1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-932843.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m","name":"rate-test-model-932843","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5d2cc1","namespace":"ai-tenant-e2e-shared-a-932843","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-932843/rate-test-model-932843"}} {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-932843/rate-test-model-932843\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5d2cc1"} {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"04774c05-24e8-4a14-b17e-ba9cc2c03a3b","keyName":"e2e-rate-a-5d2cc1","selected_subscription":"e2e-rate-iso-a-5d2cc1","selected_subscription_key":"ai-tenant-e2e-shared-a-932843/e2e-rate-iso-a-5d2cc1@ai-tenant-e2e-shared-a-932843/rate-test-model-932843","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-932843/models/facebook/opt-125m","name":"rate-test-model-932843","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5d2cc1","namespace":"ai-tenant-e2e-shared-a-932843","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-932843/rate-test-model-932843"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8713a217-dfe0-44cf-9024-f294d46f36fb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43990c59-31d6-4def-ba0d-896416261598","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53460","PortSpecifier":{"PortValue":53460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43990c59-31d6-4def-ba0d-896416261598","method":"POST","path":"/ai-tenant-e2e-shared-b-1f21d6/rate-test-model-1f21d6/v1/completions","host":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43990c59-31d6-4def-ba0d-896416261598","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53460","PortSpecifier":{"PortValue":53460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170434,"nanos":154072976},"http":{"id":"43990c59-31d6-4def-ba0d-896416261598","method":"POST","headers":{":authority":"e2e-shared-b-1f21d6.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-1f21d6/rate-test-model-1f21d6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43990c59-31d6-4def-ba0d-896416261598","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HexDjdjYVtTrAaYr_n8KU8zJPraVt8z6iNXVgyKW2F17uRqYbtbWjlfV3m9f"} {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43990c59-31d6-4def-ba0d-896416261598","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1f21d6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HexDjdjYVtTrAaYr_n8KU8zJPraVt8z6iNXVgyKW2F17uRqYbtbWjlfV3m9f\"}"} {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43990c59-31d6-4def-ba0d-896416261598","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1f21d6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a5b9140f-43d9-4649-a0df-af65c789c754","keyName":"e2e-rate-b-5d2cc1","subscription":"e2e-rate-iso-b-5d2cc1","tenant":"e2e-shared-b-1f21d6","userId":"a5b9140f-43d9-4649-a0df-af65c789c754","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43990c59-31d6-4def-ba0d-896416261598","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-1f21d6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-1f21d6/rate-test-model-1f21d6\",\"requestedSubscription\":\"e2e-rate-iso-b-5d2cc1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43990c59-31d6-4def-ba0d-896416261598","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1f21d6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-1f21d6/models/facebook/opt-125m","name":"rate-test-model-1f21d6","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-5d2cc1","namespace":"ai-tenant-e2e-shared-b-1f21d6","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-1f21d6/rate-test-model-1f21d6"}} {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43990c59-31d6-4def-ba0d-896416261598","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43990c59-31d6-4def-ba0d-896416261598","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43990c59-31d6-4def-ba0d-896416261598","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43990c59-31d6-4def-ba0d-896416261598","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43990c59-31d6-4def-ba0d-896416261598","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f21d6/rate-test-model-1f21d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f21d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43990c59-31d6-4def-ba0d-896416261598","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-5d2cc1"} {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43990c59-31d6-4def-ba0d-896416261598","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43990c59-31d6-4def-ba0d-896416261598","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43990c59-31d6-4def-ba0d-896416261598","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a5b9140f-43d9-4649-a0df-af65c789c754","keyName":"e2e-rate-b-5d2cc1","selected_subscription":"e2e-rate-iso-b-5d2cc1","selected_subscription_key":"ai-tenant-e2e-shared-b-1f21d6/e2e-rate-iso-b-5d2cc1@ai-tenant-e2e-shared-b-1f21d6/rate-test-model-1f21d6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-1f21d6/models/facebook/opt-125m","name":"rate-test-model-1f21d6","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-5d2cc1","namespace":"ai-tenant-e2e-shared-b-1f21d6","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-1f21d6/rate-test-model-1f21d6"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43990c59-31d6-4def-ba0d-896416261598","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:40:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43990c59-31d6-4def-ba0d-896416261598","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b59c5dc327e552b60e0fb9a5fb4ed69ac8959dff6e9f4c12bef162a79f55c875"} {"level":"info","ts":"2026-07-27T16:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a722f0098cd78af304aadf071fc87744f29aae2565e4335042a4c5853b9eaa79"} {"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e86801b8d0f400536d75c8b2d9f113a7f51b776cbf18da9deb2017f1d97cdb62"} {"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/540e36e14e3230fd5dec45d8f71fdb63eef597f9c95c1d312006f326d8a5cd4e"} {"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a04d7ce37a2d0ed5ae4267acdd4b30037269119355ea7cdca6f41c32dd72be4"} {"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26b8c8c4f5146430c3771f22ef9b6e8b9b27d7b30d5acdadaba06e2b521aee6d"} {"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a182ee3721c47c42891b7271d9939e9d809e355480ab2597b36353a115028ed"} {"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c36db07195624f31162273f8aa3fb2e409a2c5958a54a17b1f5dbf341a1b5385"} {"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4569be066c0f549b3e67065e281193ca6f054c9b4632c9a33c6d842c01efeb5b"} {"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ccd964829c0b149cceb0aca55451a196471b7581d7ebafafb383cd5acf11618"} {"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8420832c5c9f31dbe2425fa818c98191bed23e8c19ea1157b015388b9ebd380b"} {"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29a0ee8fcebc065661b7e94d890fc927dd1247eb82e13b8ca47b07ca795a01e0"} {"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb80f801d4732ab34d8ac55be487434299be402d1236a6ba4147abcac0676a22"} {"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/617f25290c21f61745e1c1f8cf16e002c802b8450d8d7854c2cda39a9cf51e01"} {"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/115949c32f7516de5bfe9a54bef9fdee2e74ed3649078f3e4c69fb85e7d246fb"} {"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79dd0c9e317b9aa59bc8042bd97b039ec2730e1add4880276ad76b1ec210478b"} {"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37fbb58c33513f575dbf0d22b3be98eea38dd91e131e877a02a33aeb70cecfde"} {"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8d1187d84b9ac1edd53f6e8d3c5bf6bacd8a4b1073e44bedcfe643ad0bf2d83"} {"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f8314de7e6c827375bcfabc7feee47eeeedd144f68f305a3db284ced8a1db5e"} {"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6248c359059113b668a095390510bf6c68060c21944045c71557fa53e39cd84"} {"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5386d18e5209389d2fa1430c1a5385f0d05ce16ad7dda27f6ab731a5198c5ba"} {"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ea0e5a05b4752d3abbb88c62c7cdf4921c5080ec32c9a89ee139bb515b62c50"} {"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e72237b73de613efdee570c7d5a7222f9f92d34b49b3fac973d7fbb77e4a3311"} {"level":"info","ts":"2026-07-27T16:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b185774f00127da022fbb64204d2e3691ac559842f8baaf1067287b894509fe"} {"level":"info","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37fe5aa6-4520-488e-9d71-96e52fb20b20","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58468","PortSpecifier":{"PortValue":58468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37fe5aa6-4520-488e-9d71-96e52fb20b20","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37fe5aa6-4520-488e-9d71-96e52fb20b20","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58468","PortSpecifier":{"PortValue":58468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170504,"nanos":169151904},"http":{"id":"37fe5aa6-4520-488e-9d71-96e52fb20b20","method":"POST","headers":{":authority":"maas.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"37fe5aa6-4520-488e-9d71-96e52fb20b20","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37fe5aa6-4520-488e-9d71-96e52fb20b20","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"faf73f66-aa46-43d3-81db-704f750d99f3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"]}} {"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37fe5aa6-4520-488e-9d71-96e52fb20b20","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"faf73f66-aa46-43d3-81db-704f750d99f3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37fe5aa6-4520-488e-9d71-96e52fb20b20","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37fe5aa6-4520-488e-9d71-96e52fb20b20","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37fe5aa6-4520-488e-9d71-96e52fb20b20","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"37fe5aa6-4520-488e-9d71-96e52fb20b20","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37fe5aa6-4520-488e-9d71-96e52fb20b20","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37fe5aa6-4520-488e-9d71-96e52fb20b20","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37fe5aa6-4520-488e-9d71-96e52fb20b20","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37fe5aa6-4520-488e-9d71-96e52fb20b20","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58482","PortSpecifier":{"PortValue":58482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58482","PortSpecifier":{"PortValue":58482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170504,"nanos":224222666},"http":{"id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","method":"POST","headers":{":authority":"maas.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Ku347sEJuqdbaKKQ_atXwhuW5Dh1xLKUuCI3JSe5yvWEP0ZBKeyT9qXpCd6E"} {"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Ku347sEJuqdbaKKQ_atXwhuW5Dh1xLKUuCI3JSe5yvWEP0ZBKeyT9qXpCd6E\"}"} {"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c27bcd05-e0ba-4585-942b-bab8c03bc1ca","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"c27bcd05-e0ba-4585-942b-bab8c03bc1ca","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c27bcd05-e0ba-4585-942b-bab8c03bc1ca","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:41:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fb5e0e3-cd16-4b67-b3e1-dc8a1606148c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0d12de1c795aeaffe9e0e49756f5d1f7db79331760ac5d19060ecaf8e1f531f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0d12de1c795aeaffe9e0e49756f5d1f7db79331760ac5d19060ecaf8e1f531f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0d12de1c795aeaffe9e0e49756f5d1f7db79331760ac5d19060ecaf8e1f531f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0d12de1c795aeaffe9e0e49756f5d1f7db79331760ac5d19060ecaf8e1f531f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0d12de1c795aeaffe9e0e49756f5d1f7db79331760ac5d19060ecaf8e1f531f"} {"level":"debug","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0d12de1c795aeaffe9e0e49756f5d1f7db79331760ac5d19060ecaf8e1f531f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0d12de1c795aeaffe9e0e49756f5d1f7db79331760ac5d19060ecaf8e1f531f"} {"level":"debug","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0d12de1c795aeaffe9e0e49756f5d1f7db79331760ac5d19060ecaf8e1f531f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0d12de1c795aeaffe9e0e49756f5d1f7db79331760ac5d19060ecaf8e1f531f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0d12de1c795aeaffe9e0e49756f5d1f7db79331760ac5d19060ecaf8e1f531f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0d12de1c795aeaffe9e0e49756f5d1f7db79331760ac5d19060ecaf8e1f531f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0d12de1c795aeaffe9e0e49756f5d1f7db79331760ac5d19060ecaf8e1f531f"} {"level":"debug","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee"} {"level":"debug","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee"} {"level":"debug","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee"} {"level":"debug","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee"} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee"} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee"} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee"} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee"} {"level":"error","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea"} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea"} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea"} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95542a1f9b0012a5ca6299a5ba2967d9a6bb84dc12033c1742f417a3372446f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea"} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95542a1f9b0012a5ca6299a5ba2967d9a6bb84dc12033c1742f417a3372446f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95542a1f9b0012a5ca6299a5ba2967d9a6bb84dc12033c1742f417a3372446f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95542a1f9b0012a5ca6299a5ba2967d9a6bb84dc12033c1742f417a3372446f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95542a1f9b0012a5ca6299a5ba2967d9a6bb84dc12033c1742f417a3372446f6"} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95542a1f9b0012a5ca6299a5ba2967d9a6bb84dc12033c1742f417a3372446f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95542a1f9b0012a5ca6299a5ba2967d9a6bb84dc12033c1742f417a3372446f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95542a1f9b0012a5ca6299a5ba2967d9a6bb84dc12033c1742f417a3372446f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95542a1f9b0012a5ca6299a5ba2967d9a6bb84dc12033c1742f417a3372446f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95542a1f9b0012a5ca6299a5ba2967d9a6bb84dc12033c1742f417a3372446f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95542a1f9b0012a5ca6299a5ba2967d9a6bb84dc12033c1742f417a3372446f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea"} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95542a1f9b0012a5ca6299a5ba2967d9a6bb84dc12033c1742f417a3372446f6"} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e229c7f5b4b2c79df76540fccfa5c9ba3e2d22cf74df4e55abd9e5b965e22aad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e229c7f5b4b2c79df76540fccfa5c9ba3e2d22cf74df4e55abd9e5b965e22aad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e229c7f5b4b2c79df76540fccfa5c9ba3e2d22cf74df4e55abd9e5b965e22aad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e229c7f5b4b2c79df76540fccfa5c9ba3e2d22cf74df4e55abd9e5b965e22aad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e229c7f5b4b2c79df76540fccfa5c9ba3e2d22cf74df4e55abd9e5b965e22aad"} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e229c7f5b4b2c79df76540fccfa5c9ba3e2d22cf74df4e55abd9e5b965e22aad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e229c7f5b4b2c79df76540fccfa5c9ba3e2d22cf74df4e55abd9e5b965e22aad"} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e229c7f5b4b2c79df76540fccfa5c9ba3e2d22cf74df4e55abd9e5b965e22aad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e229c7f5b4b2c79df76540fccfa5c9ba3e2d22cf74df4e55abd9e5b965e22aad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e229c7f5b4b2c79df76540fccfa5c9ba3e2d22cf74df4e55abd9e5b965e22aad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e229c7f5b4b2c79df76540fccfa5c9ba3e2d22cf74df4e55abd9e5b965e22aad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed43ee8d5778afc64be9e4a5ba161154ea6f73265277f6ad08f9681e27ce5190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed43ee8d5778afc64be9e4a5ba161154ea6f73265277f6ad08f9681e27ce5190","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed43ee8d5778afc64be9e4a5ba161154ea6f73265277f6ad08f9681e27ce5190","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b365b1fa0bc9547c2bd99b9043d0b472d8c97c7e2c711646c10b6a23ed83f26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e229c7f5b4b2c79df76540fccfa5c9ba3e2d22cf74df4e55abd9e5b965e22aad"} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b365b1fa0bc9547c2bd99b9043d0b472d8c97c7e2c711646c10b6a23ed83f26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed43ee8d5778afc64be9e4a5ba161154ea6f73265277f6ad08f9681e27ce5190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed43ee8d5778afc64be9e4a5ba161154ea6f73265277f6ad08f9681e27ce5190","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b365b1fa0bc9547c2bd99b9043d0b472d8c97c7e2c711646c10b6a23ed83f26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b365b1fa0bc9547c2bd99b9043d0b472d8c97c7e2c711646c10b6a23ed83f26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed43ee8d5778afc64be9e4a5ba161154ea6f73265277f6ad08f9681e27ce5190","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed43ee8d5778afc64be9e4a5ba161154ea6f73265277f6ad08f9681e27ce5190","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b365b1fa0bc9547c2bd99b9043d0b472d8c97c7e2c711646c10b6a23ed83f26","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed43ee8d5778afc64be9e4a5ba161154ea6f73265277f6ad08f9681e27ce5190"} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffff429ac14e33f8c8c80a573b991a1c0fe3d084ba1178331185c18937344168","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b365b1fa0bc9547c2bd99b9043d0b472d8c97c7e2c711646c10b6a23ed83f26"} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffff429ac14e33f8c8c80a573b991a1c0fe3d084ba1178331185c18937344168","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b365b1fa0bc9547c2bd99b9043d0b472d8c97c7e2c711646c10b6a23ed83f26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b365b1fa0bc9547c2bd99b9043d0b472d8c97c7e2c711646c10b6a23ed83f26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b365b1fa0bc9547c2bd99b9043d0b472d8c97c7e2c711646c10b6a23ed83f26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5333b913b148ba09a8e5209fda15918b32fe323a71b3fc85533cd136aeaff50d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed43ee8d5778afc64be9e4a5ba161154ea6f73265277f6ad08f9681e27ce5190"} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5333b913b148ba09a8e5209fda15918b32fe323a71b3fc85533cd136aeaff50d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffff429ac14e33f8c8c80a573b991a1c0fe3d084ba1178331185c18937344168","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffff429ac14e33f8c8c80a573b991a1c0fe3d084ba1178331185c18937344168","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2911308978d4683b237c64760bc449981e9bc0c5af63de9a9f043c718dcabcee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffff429ac14e33f8c8c80a573b991a1c0fe3d084ba1178331185c18937344168"} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2911308978d4683b237c64760bc449981e9bc0c5af63de9a9f043c718dcabcee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b365b1fa0bc9547c2bd99b9043d0b472d8c97c7e2c711646c10b6a23ed83f26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5333b913b148ba09a8e5209fda15918b32fe323a71b3fc85533cd136aeaff50d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5333b913b148ba09a8e5209fda15918b32fe323a71b3fc85533cd136aeaff50d"} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5333b913b148ba09a8e5209fda15918b32fe323a71b3fc85533cd136aeaff50d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed43ee8d5778afc64be9e4a5ba161154ea6f73265277f6ad08f9681e27ce5190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed43ee8d5778afc64be9e4a5ba161154ea6f73265277f6ad08f9681e27ce5190"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2911308978d4683b237c64760bc449981e9bc0c5af63de9a9f043c718dcabcee"} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed43ee8d5778afc64be9e4a5ba161154ea6f73265277f6ad08f9681e27ce5190","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffff429ac14e33f8c8c80a573b991a1c0fe3d084ba1178331185c18937344168","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffff429ac14e33f8c8c80a573b991a1c0fe3d084ba1178331185c18937344168"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffff429ac14e33f8c8c80a573b991a1c0fe3d084ba1178331185c18937344168","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2911308978d4683b237c64760bc449981e9bc0c5af63de9a9f043c718dcabcee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2911308978d4683b237c64760bc449981e9bc0c5af63de9a9f043c718dcabcee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b365b1fa0bc9547c2bd99b9043d0b472d8c97c7e2c711646c10b6a23ed83f26"} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2911308978d4683b237c64760bc449981e9bc0c5af63de9a9f043c718dcabcee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5333b913b148ba09a8e5209fda15918b32fe323a71b3fc85533cd136aeaff50d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5333b913b148ba09a8e5209fda15918b32fe323a71b3fc85533cd136aeaff50d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffff429ac14e33f8c8c80a573b991a1c0fe3d084ba1178331185c18937344168"} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5333b913b148ba09a8e5209fda15918b32fe323a71b3fc85533cd136aeaff50d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5333b913b148ba09a8e5209fda15918b32fe323a71b3fc85533cd136aeaff50d"} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed43ee8d5778afc64be9e4a5ba161154ea6f73265277f6ad08f9681e27ce5190","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffff429ac14e33f8c8c80a573b991a1c0fe3d084ba1178331185c18937344168","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2911308978d4683b237c64760bc449981e9bc0c5af63de9a9f043c718dcabcee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5333b913b148ba09a8e5209fda15918b32fe323a71b3fc85533cd136aeaff50d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560"} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T16:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed43ee8d5778afc64be9e4a5ba161154ea6f73265277f6ad08f9681e27ce5190"} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T16:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2911308978d4683b237c64760bc449981e9bc0c5af63de9a9f043c718dcabcee"} {"level":"info","ts":"2026-07-27T16:42:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5333b913b148ba09a8e5209fda15918b32fe323a71b3fc85533cd136aeaff50d"} {"level":"info","ts":"2026-07-27T16:42:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560"} {"level":"info","ts":"2026-07-27T16:42:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0cfcbfa-52de-42b6-9e3e-3f7808aad830","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:49294","PortSpecifier":{"PortValue":49294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c0cfcbfa-52de-42b6-9e3e-3f7808aad830","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-ffa17b.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:42:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0cfcbfa-52de-42b6-9e3e-3f7808aad830","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:49294","PortSpecifier":{"PortValue":49294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170552,"nanos":281264862},"http":{"id":"c0cfcbfa-52de-42b6-9e3e-3f7808aad830","method":"POST","headers":{":authority":"e2e-ipp-a-ffa17b.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:42:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c0cfcbfa-52de-42b6-9e3e-3f7808aad830","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T16:42:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c0cfcbfa-52de-42b6-9e3e-3f7808aad830","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"faf73f66-aa46-43d3-81db-704f750d99f3","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"]}} {"level":"debug","ts":"2026-07-27T16:42:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c0cfcbfa-52de-42b6-9e3e-3f7808aad830","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1f622fec1e01"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf36a1b6-5829-4ab9-a696-a0df4912975e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"faf73f66-aa46-43d3-81db-704f750d99f3","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-ffa17b.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:42:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0cfcbfa-52de-42b6-9e3e-3f7808aad830","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:42:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0cfcbfa-52de-42b6-9e3e-3f7808aad830","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:42:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0cfcbfa-52de-42b6-9e3e-3f7808aad830","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-ffa17b/ipp-route-ffa17b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-ffa17b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:42:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c0cfcbfa-52de-42b6-9e3e-3f7808aad830","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T16:42:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0cfcbfa-52de-42b6-9e3e-3f7808aad830","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T16:42:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0cfcbfa-52de-42b6-9e3e-3f7808aad830","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T16:42:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0cfcbfa-52de-42b6-9e3e-3f7808aad830","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:42:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0cfcbfa-52de-42b6-9e3e-3f7808aad830","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41038","PortSpecifier":{"PortValue":41038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","method":"POST","path":"/ai-tenant-e2e-ipp-a-ffa17b/ipp-route-ffa17b/v1/chat/completions","host":"e2e-ipp-a-ffa17b.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41038","PortSpecifier":{"PortValue":41038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785170554,"nanos":344588978},"http":{"id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","method":"POST","headers":{":authority":"e2e-ipp-a-ffa17b.apps.d1fdabf9-bd14-44f2-a57f-1f622fec1e01.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-ffa17b/ipp-route-ffa17b/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3L1IP9oXUMksweTQ_L8Yr5dV4KFS5rbKsQ3uvsPA8odSPiXm4EEldN4Da8Xr"} {"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-ffa17b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3L1IP9oXUMksweTQ_L8Yr5dV4KFS5rbKsQ3uvsPA8odSPiXm4EEldN4Da8Xr\"}"} {"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-ffa17b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"80b02e07-7727-47bb-9e07-2469db26cff3","keyName":"e2e-ipp-ffa17b","subscription":"ipp-route-ffa17b-sub","tenant":"e2e-ipp-a-ffa17b","userId":"80b02e07-7727-47bb-9e07-2469db26cff3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-ffa17b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-ffa17b/ipp-route-ffa17b\",\"requestedSubscription\":\"ipp-route-ffa17b-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-ffa17b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-ffa17b/models/facebook/opt-125m","name":"ipp-route-ffa17b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-ffa17b-sub","namespace":"ai-tenant-e2e-ipp-a-ffa17b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-ffa17b/ipp-route-ffa17b"}} {"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-ffa17b/ipp-route-ffa17b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-ffa17b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-ffa17b-sub"} {"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"80b02e07-7727-47bb-9e07-2469db26cff3","keyName":"e2e-ipp-ffa17b","selected_subscription":"ipp-route-ffa17b-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-ffa17b/ipp-route-ffa17b-sub@ai-tenant-e2e-ipp-a-ffa17b/ipp-route-ffa17b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-ffa17b/models/facebook/opt-125m","name":"ipp-route-ffa17b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-ffa17b-sub","namespace":"ai-tenant-e2e-ipp-a-ffa17b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-ffa17b/ipp-route-ffa17b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T16:42:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f50ada3-286a-4af7-bbb2-c41699e36cd1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T16:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e229c7f5b4b2c79df76540fccfa5c9ba3e2d22cf74df4e55abd9e5b965e22aad"} {"level":"info","ts":"2026-07-27T16:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffff429ac14e33f8c8c80a573b991a1c0fe3d084ba1178331185c18937344168"} {"level":"info","ts":"2026-07-27T16:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ce0fb95d05d84b634d005b6db311c1af967c3e7075621e8219c5a86c8c90cee"} {"level":"info","ts":"2026-07-27T16:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95542a1f9b0012a5ca6299a5ba2967d9a6bb84dc12033c1742f417a3372446f6"} {"level":"info","ts":"2026-07-27T16:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed43ee8d5778afc64be9e4a5ba161154ea6f73265277f6ad08f9681e27ce5190"} {"level":"info","ts":"2026-07-27T16:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b365b1fa0bc9547c2bd99b9043d0b472d8c97c7e2c711646c10b6a23ed83f26"} {"level":"info","ts":"2026-07-27T16:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b67d1dd4a7401b2b67cf631adf46276f35a61e70a8336e5ad5e75e82205680ea"} {"level":"info","ts":"2026-07-27T16:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0d12de1c795aeaffe9e0e49756f5d1f7db79331760ac5d19060ecaf8e1f531f"} {"level":"info","ts":"2026-07-27T16:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a17bea340b4f9f4b5d6585ba7fdbbfbdc300892349aa66263609a84f601998b8"} {"level":"info","ts":"2026-07-27T16:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2911308978d4683b237c64760bc449981e9bc0c5af63de9a9f043c718dcabcee"} {"level":"info","ts":"2026-07-27T16:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5333b913b148ba09a8e5209fda15918b32fe323a71b3fc85533cd136aeaff50d"} {"level":"info","ts":"2026-07-27T16:43:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/634876f3cc4c1b7a681a4425e7a92aad80a538c553cce0cfe7b39aab6d4e6560"}