--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04bd756a-59d5-463f-9c1e-1147baac6527","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04bd756a-59d5-463f-9c1e-1147baac6527","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04bd756a-59d5-463f-9c1e-1147baac6527","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/auth-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"04bd756a-59d5-463f-9c1e-1147baac6527","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04bd756a-59d5-463f-9c1e-1147baac6527","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04bd756a-59d5-463f-9c1e-1147baac6527","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04bd756a-59d5-463f-9c1e-1147baac6527","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04bd756a-59d5-463f-9c1e-1147baac6527","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5385cf0-e6d6-43f5-b7e3-273aca2be69c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53850","PortSpecifier":{"PortValue":53850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5385cf0-e6d6-43f5-b7e3-273aca2be69c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5385cf0-e6d6-43f5-b7e3-273aca2be69c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53850","PortSpecifier":{"PortValue":53850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832180,"nanos":258328135},"http":{"id":"c5385cf0-e6d6-43f5-b7e3-273aca2be69c","method":"POST","headers":{":authority":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c5385cf0-e6d6-43f5-b7e3-273aca2be69c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5385cf0-e6d6-43f5-b7e3-273aca2be69c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"]}} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5385cf0-e6d6-43f5-b7e3-273aca2be69c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5385cf0-e6d6-43f5-b7e3-273aca2be69c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5385cf0-e6d6-43f5-b7e3-273aca2be69c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5385cf0-e6d6-43f5-b7e3-273aca2be69c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ee985/auth-test-model-8ee985\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ee985/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c5385cf0-e6d6-43f5-b7e3-273aca2be69c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5385cf0-e6d6-43f5-b7e3-273aca2be69c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5385cf0-e6d6-43f5-b7e3-273aca2be69c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5385cf0-e6d6-43f5-b7e3-273aca2be69c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5385cf0-e6d6-43f5-b7e3-273aca2be69c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9d3de49-e717-4b03-9821-cfc62cfb3e28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:58614","PortSpecifier":{"PortValue":58614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e9d3de49-e717-4b03-9821-cfc62cfb3e28","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9d3de49-e717-4b03-9821-cfc62cfb3e28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:58614","PortSpecifier":{"PortValue":58614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832180,"nanos":300832398},"http":{"id":"e9d3de49-e717-4b03-9821-cfc62cfb3e28","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e9d3de49-e717-4b03-9821-cfc62cfb3e28","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e9d3de49-e717-4b03-9821-cfc62cfb3e28","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"]}} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e9d3de49-e717-4b03-9821-cfc62cfb3e28","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9d3de49-e717-4b03-9821-cfc62cfb3e28","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9d3de49-e717-4b03-9821-cfc62cfb3e28","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9d3de49-e717-4b03-9821-cfc62cfb3e28","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/auth-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e9d3de49-e717-4b03-9821-cfc62cfb3e28","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9d3de49-e717-4b03-9821-cfc62cfb3e28","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9d3de49-e717-4b03-9821-cfc62cfb3e28","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9d3de49-e717-4b03-9821-cfc62cfb3e28","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9d3de49-e717-4b03-9821-cfc62cfb3e28","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c898d42-020e-4183-b218-04d86543b264","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53854","PortSpecifier":{"PortValue":53854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c898d42-020e-4183-b218-04d86543b264","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c898d42-020e-4183-b218-04d86543b264","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53854","PortSpecifier":{"PortValue":53854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832180,"nanos":345397994},"http":{"id":"2c898d42-020e-4183-b218-04d86543b264","method":"POST","headers":{":authority":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2c898d42-020e-4183-b218-04d86543b264","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c898d42-020e-4183-b218-04d86543b264","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"]}} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c898d42-020e-4183-b218-04d86543b264","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c898d42-020e-4183-b218-04d86543b264","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c898d42-020e-4183-b218-04d86543b264","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c898d42-020e-4183-b218-04d86543b264","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ee985/auth-test-model-8ee985\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ee985/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2c898d42-020e-4183-b218-04d86543b264","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c898d42-020e-4183-b218-04d86543b264","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c898d42-020e-4183-b218-04d86543b264","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c898d42-020e-4183-b218-04d86543b264","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:43:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c898d42-020e-4183-b218-04d86543b264","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725"} {"level":"info","ts":"2026-07-23T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81"} {"level":"info","ts":"2026-07-23T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e22cbc545e582f86be91087ec81a194c6478369a0efed68d70c1d708d2c40986"} {"level":"info","ts":"2026-07-23T18:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6"} {"level":"info","ts":"2026-07-23T18:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"} {"level":"info","ts":"2026-07-23T18:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d"} {"level":"info","ts":"2026-07-23T18:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6"} {"level":"info","ts":"2026-07-23T18:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e"} {"level":"info","ts":"2026-07-23T18:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b"} {"level":"info","ts":"2026-07-23T18:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b830269204a5e36e11442c7d4ade9fccddb2ae643c11b5bef4b763490ca6765"} {"level":"info","ts":"2026-07-23T18:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba876eaf928b4bc397358006d10bc0f13d7936606bb07a0ea6a669da4ff6d79f"} {"level":"info","ts":"2026-07-23T18:43:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280"} {"level":"debug","ts":"2026-07-23T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"} {"level":"debug","ts":"2026-07-23T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"} {"level":"error","ts":"2026-07-23T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"} {"level":"error","ts":"2026-07-23T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725"} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725"} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"} {"level":"error","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725"} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725"} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725"} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725"} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b"} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b"} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725"} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b"} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725"} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280"} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b"} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81"} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725"} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280"} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d"} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81"} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280"} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b830269204a5e36e11442c7d4ade9fccddb2ae643c11b5bef4b763490ca6765","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d"} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b830269204a5e36e11442c7d4ade9fccddb2ae643c11b5bef4b763490ca6765","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b830269204a5e36e11442c7d4ade9fccddb2ae643c11b5bef4b763490ca6765"} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b830269204a5e36e11442c7d4ade9fccddb2ae643c11b5bef4b763490ca6765","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b830269204a5e36e11442c7d4ade9fccddb2ae643c11b5bef4b763490ca6765"} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b830269204a5e36e11442c7d4ade9fccddb2ae643c11b5bef4b763490ca6765","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280"} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b830269204a5e36e11442c7d4ade9fccddb2ae643c11b5bef4b763490ca6765"} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b830269204a5e36e11442c7d4ade9fccddb2ae643c11b5bef4b763490ca6765","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b830269204a5e36e11442c7d4ade9fccddb2ae643c11b5bef4b763490ca6765"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6"} {"level":"info","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b830269204a5e36e11442c7d4ade9fccddb2ae643c11b5bef4b763490ca6765","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280"} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b830269204a5e36e11442c7d4ade9fccddb2ae643c11b5bef4b763490ca6765"} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6"} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b830269204a5e36e11442c7d4ade9fccddb2ae643c11b5bef4b763490ca6765","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba876eaf928b4bc397358006d10bc0f13d7936606bb07a0ea6a669da4ff6d79f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba876eaf928b4bc397358006d10bc0f13d7936606bb07a0ea6a669da4ff6d79f"} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba876eaf928b4bc397358006d10bc0f13d7936606bb07a0ea6a669da4ff6d79f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280"} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba876eaf928b4bc397358006d10bc0f13d7936606bb07a0ea6a669da4ff6d79f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba876eaf928b4bc397358006d10bc0f13d7936606bb07a0ea6a669da4ff6d79f"} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280"} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba876eaf928b4bc397358006d10bc0f13d7936606bb07a0ea6a669da4ff6d79f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba876eaf928b4bc397358006d10bc0f13d7936606bb07a0ea6a669da4ff6d79f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e22cbc545e582f86be91087ec81a194c6478369a0efed68d70c1d708d2c40986"} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba876eaf928b4bc397358006d10bc0f13d7936606bb07a0ea6a669da4ff6d79f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e22cbc545e582f86be91087ec81a194c6478369a0efed68d70c1d708d2c40986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e22cbc545e582f86be91087ec81a194c6478369a0efed68d70c1d708d2c40986"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280"} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e22cbc545e582f86be91087ec81a194c6478369a0efed68d70c1d708d2c40986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba876eaf928b4bc397358006d10bc0f13d7936606bb07a0ea6a669da4ff6d79f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba876eaf928b4bc397358006d10bc0f13d7936606bb07a0ea6a669da4ff6d79f"} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba876eaf928b4bc397358006d10bc0f13d7936606bb07a0ea6a669da4ff6d79f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e22cbc545e582f86be91087ec81a194c6478369a0efed68d70c1d708d2c40986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e22cbc545e582f86be91087ec81a194c6478369a0efed68d70c1d708d2c40986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba876eaf928b4bc397358006d10bc0f13d7936606bb07a0ea6a669da4ff6d79f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba876eaf928b4bc397358006d10bc0f13d7936606bb07a0ea6a669da4ff6d79f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e22cbc545e582f86be91087ec81a194c6478369a0efed68d70c1d708d2c40986"} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba876eaf928b4bc397358006d10bc0f13d7936606bb07a0ea6a669da4ff6d79f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba876eaf928b4bc397358006d10bc0f13d7936606bb07a0ea6a669da4ff6d79f"} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e22cbc545e582f86be91087ec81a194c6478369a0efed68d70c1d708d2c40986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e22cbc545e582f86be91087ec81a194c6478369a0efed68d70c1d708d2c40986"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e"} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e22cbc545e582f86be91087ec81a194c6478369a0efed68d70c1d708d2c40986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba876eaf928b4bc397358006d10bc0f13d7936606bb07a0ea6a669da4ff6d79f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e22cbc545e582f86be91087ec81a194c6478369a0efed68d70c1d708d2c40986"} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e22cbc545e582f86be91087ec81a194c6478369a0efed68d70c1d708d2c40986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6"} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba876eaf928b4bc397358006d10bc0f13d7936606bb07a0ea6a669da4ff6d79f"} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e"} {"level":"error","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e22cbc545e582f86be91087ec81a194c6478369a0efed68d70c1d708d2c40986"} {"level":"info","ts":"2026-07-23T18:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6"} {"level":"info","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f498d61-bd34-42d7-a448-783f4fba51da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42884","PortSpecifier":{"PortValue":42884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0f498d61-bd34-42d7-a448-783f4fba51da","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f498d61-bd34-42d7-a448-783f4fba51da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42884","PortSpecifier":{"PortValue":42884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832200,"nanos":47524658},"http":{"id":"0f498d61-bd34-42d7-a448-783f4fba51da","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0f498d61-bd34-42d7-a448-783f4fba51da","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0f498d61-bd34-42d7-a448-783f4fba51da","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"]}} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0f498d61-bd34-42d7-a448-783f4fba51da","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f498d61-bd34-42d7-a448-783f4fba51da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f498d61-bd34-42d7-a448-783f4fba51da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f498d61-bd34-42d7-a448-783f4fba51da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/auth-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0f498d61-bd34-42d7-a448-783f4fba51da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f498d61-bd34-42d7-a448-783f4fba51da","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f498d61-bd34-42d7-a448-783f4fba51da","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f498d61-bd34-42d7-a448-783f4fba51da","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f498d61-bd34-42d7-a448-783f4fba51da","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c84d8a9-519b-9e22-8afa-af50ce9513f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57448","PortSpecifier":{"PortValue":57448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c84d8a9-519b-9e22-8afa-af50ce9513f8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c84d8a9-519b-9e22-8afa-af50ce9513f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57448","PortSpecifier":{"PortValue":57448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832200,"nanos":85668706},"http":{"id":"5c84d8a9-519b-9e22-8afa-af50ce9513f8","method":"POST","headers":{":authority":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5c84d8a9-519b-9e22-8afa-af50ce9513f8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c84d8a9-519b-9e22-8afa-af50ce9513f8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"]}} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c84d8a9-519b-9e22-8afa-af50ce9513f8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c84d8a9-519b-9e22-8afa-af50ce9513f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c84d8a9-519b-9e22-8afa-af50ce9513f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c84d8a9-519b-9e22-8afa-af50ce9513f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ee985/auth-test-model-8ee985\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ee985/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5c84d8a9-519b-9e22-8afa-af50ce9513f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c84d8a9-519b-9e22-8afa-af50ce9513f8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c84d8a9-519b-9e22-8afa-af50ce9513f8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c84d8a9-519b-9e22-8afa-af50ce9513f8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c84d8a9-519b-9e22-8afa-af50ce9513f8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34e9b17e-3128-491f-8a79-30f50c110fef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57464","PortSpecifier":{"PortValue":57464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"34e9b17e-3128-491f-8a79-30f50c110fef","method":"GET","path":"/maas-api/v1/api-keys/63c5759b-1cbd-48bc-94ec-2635a1f7e19a","host":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34e9b17e-3128-491f-8a79-30f50c110fef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57464","PortSpecifier":{"PortValue":57464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832200,"nanos":132487515},"http":{"id":"34e9b17e-3128-491f-8a79-30f50c110fef","method":"GET","headers":{":authority":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/63c5759b-1cbd-48bc-94ec-2635a1f7e19a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"34e9b17e-3128-491f-8a79-30f50c110fef","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"34e9b17e-3128-491f-8a79-30f50c110fef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"]}} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"34e9b17e-3128-491f-8a79-30f50c110fef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/63c5759b-1cbd-48bc-94ec-2635a1f7e19a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34e9b17e-3128-491f-8a79-30f50c110fef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34e9b17e-3128-491f-8a79-30f50c110fef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34e9b17e-3128-491f-8a79-30f50c110fef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ee985/auth-test-model-8ee985\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ee985/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"34e9b17e-3128-491f-8a79-30f50c110fef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34e9b17e-3128-491f-8a79-30f50c110fef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34e9b17e-3128-491f-8a79-30f50c110fef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34e9b17e-3128-491f-8a79-30f50c110fef","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34e9b17e-3128-491f-8a79-30f50c110fef","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8cb1053-1598-4d6f-a7ee-e7e176711c70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42890","PortSpecifier":{"PortValue":42890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8cb1053-1598-4d6f-a7ee-e7e176711c70","method":"GET","path":"/maas-api/v1/api-keys/63c5759b-1cbd-48bc-94ec-2635a1f7e19a","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8cb1053-1598-4d6f-a7ee-e7e176711c70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42890","PortSpecifier":{"PortValue":42890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832200,"nanos":170876072},"http":{"id":"a8cb1053-1598-4d6f-a7ee-e7e176711c70","method":"GET","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/63c5759b-1cbd-48bc-94ec-2635a1f7e19a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a8cb1053-1598-4d6f-a7ee-e7e176711c70","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8cb1053-1598-4d6f-a7ee-e7e176711c70","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"]}} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8cb1053-1598-4d6f-a7ee-e7e176711c70","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/63c5759b-1cbd-48bc-94ec-2635a1f7e19a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8cb1053-1598-4d6f-a7ee-e7e176711c70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8cb1053-1598-4d6f-a7ee-e7e176711c70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8cb1053-1598-4d6f-a7ee-e7e176711c70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/auth-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a8cb1053-1598-4d6f-a7ee-e7e176711c70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8cb1053-1598-4d6f-a7ee-e7e176711c70","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8cb1053-1598-4d6f-a7ee-e7e176711c70","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8cb1053-1598-4d6f-a7ee-e7e176711c70","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:43:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8cb1053-1598-4d6f-a7ee-e7e176711c70","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81"} {"level":"info","ts":"2026-07-23T18:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6"} {"level":"info","ts":"2026-07-23T18:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725"} {"level":"info","ts":"2026-07-23T18:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b"} {"level":"info","ts":"2026-07-23T18:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b830269204a5e36e11442c7d4ade9fccddb2ae643c11b5bef4b763490ca6765"} {"level":"info","ts":"2026-07-23T18:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6"} {"level":"info","ts":"2026-07-23T18:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d"} {"level":"info","ts":"2026-07-23T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e22cbc545e582f86be91087ec81a194c6478369a0efed68d70c1d708d2c40986"} {"level":"info","ts":"2026-07-23T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba876eaf928b4bc397358006d10bc0f13d7936606bb07a0ea6a669da4ff6d79f"} {"level":"info","ts":"2026-07-23T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"} {"level":"info","ts":"2026-07-23T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280"} {"level":"info","ts":"2026-07-23T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e"} {"level":"debug","ts":"2026-07-23T18:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b830269204a5e36e11442c7d4ade9fccddb2ae643c11b5bef4b763490ca6765","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b830269204a5e36e11442c7d4ade9fccddb2ae643c11b5bef4b763490ca6765","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b830269204a5e36e11442c7d4ade9fccddb2ae643c11b5bef4b763490ca6765","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b830269204a5e36e11442c7d4ade9fccddb2ae643c11b5bef4b763490ca6765"} {"level":"debug","ts":"2026-07-23T18:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b830269204a5e36e11442c7d4ade9fccddb2ae643c11b5bef4b763490ca6765","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b830269204a5e36e11442c7d4ade9fccddb2ae643c11b5bef4b763490ca6765","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b830269204a5e36e11442c7d4ade9fccddb2ae643c11b5bef4b763490ca6765"} {"level":"debug","ts":"2026-07-23T18:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b830269204a5e36e11442c7d4ade9fccddb2ae643c11b5bef4b763490ca6765","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b830269204a5e36e11442c7d4ade9fccddb2ae643c11b5bef4b763490ca6765"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b830269204a5e36e11442c7d4ade9fccddb2ae643c11b5bef4b763490ca6765","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280"} {"level":"debug","ts":"2026-07-23T18:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b830269204a5e36e11442c7d4ade9fccddb2ae643c11b5bef4b763490ca6765","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b830269204a5e36e11442c7d4ade9fccddb2ae643c11b5bef4b763490ca6765"} {"level":"error","ts":"2026-07-23T18:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280"} {"level":"debug","ts":"2026-07-23T18:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280"} {"level":"debug","ts":"2026-07-23T18:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:43:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280"} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6"} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6"} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6"} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81"} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6"} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81"} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6"} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81"} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81"} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba876eaf928b4bc397358006d10bc0f13d7936606bb07a0ea6a669da4ff6d79f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81"} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba876eaf928b4bc397358006d10bc0f13d7936606bb07a0ea6a669da4ff6d79f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba876eaf928b4bc397358006d10bc0f13d7936606bb07a0ea6a669da4ff6d79f"} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba876eaf928b4bc397358006d10bc0f13d7936606bb07a0ea6a669da4ff6d79f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba876eaf928b4bc397358006d10bc0f13d7936606bb07a0ea6a669da4ff6d79f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba876eaf928b4bc397358006d10bc0f13d7936606bb07a0ea6a669da4ff6d79f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d"} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba876eaf928b4bc397358006d10bc0f13d7936606bb07a0ea6a669da4ff6d79f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81"} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba876eaf928b4bc397358006d10bc0f13d7936606bb07a0ea6a669da4ff6d79f"} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d"} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e"} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d"} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e22cbc545e582f86be91087ec81a194c6478369a0efed68d70c1d708d2c40986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e22cbc545e582f86be91087ec81a194c6478369a0efed68d70c1d708d2c40986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e"} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e22cbc545e582f86be91087ec81a194c6478369a0efed68d70c1d708d2c40986"} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e22cbc545e582f86be91087ec81a194c6478369a0efed68d70c1d708d2c40986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e22cbc545e582f86be91087ec81a194c6478369a0efed68d70c1d708d2c40986"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e22cbc545e582f86be91087ec81a194c6478369a0efed68d70c1d708d2c40986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d"} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e22cbc545e582f86be91087ec81a194c6478369a0efed68d70c1d708d2c40986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e"} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e22cbc545e582f86be91087ec81a194c6478369a0efed68d70c1d708d2c40986"} {"level":"error","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d"} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e"} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6"} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6"} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6"} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b"} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6"} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b"} {"level":"info","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6"} {"level":"info","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b"} {"level":"info","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725"} {"level":"info","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6"} {"level":"info","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b"} {"level":"info","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:43:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:43:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725"} {"level":"info","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6"} {"level":"info","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b"} {"level":"info","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725"} {"level":"error","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:43:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:43:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b"} {"level":"info","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be668ece-4056-4565-a4d5-fcc0a82c43a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46792","PortSpecifier":{"PortValue":46792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be668ece-4056-4565-a4d5-fcc0a82c43a3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be668ece-4056-4565-a4d5-fcc0a82c43a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46792","PortSpecifier":{"PortValue":46792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832220,"nanos":674587848},"http":{"id":"be668ece-4056-4565-a4d5-fcc0a82c43a3","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"be668ece-4056-4565-a4d5-fcc0a82c43a3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be668ece-4056-4565-a4d5-fcc0a82c43a3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"]}} {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be668ece-4056-4565-a4d5-fcc0a82c43a3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be668ece-4056-4565-a4d5-fcc0a82c43a3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be668ece-4056-4565-a4d5-fcc0a82c43a3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be668ece-4056-4565-a4d5-fcc0a82c43a3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/auth-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"be668ece-4056-4565-a4d5-fcc0a82c43a3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be668ece-4056-4565-a4d5-fcc0a82c43a3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be668ece-4056-4565-a4d5-fcc0a82c43a3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be668ece-4056-4565-a4d5-fcc0a82c43a3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be668ece-4056-4565-a4d5-fcc0a82c43a3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8685d9a8-8e19-4092-a9aa-d46ca3ba432c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:36448","PortSpecifier":{"PortValue":36448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8685d9a8-8e19-4092-a9aa-d46ca3ba432c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8685d9a8-8e19-4092-a9aa-d46ca3ba432c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:36448","PortSpecifier":{"PortValue":36448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832220,"nanos":710254485},"http":{"id":"8685d9a8-8e19-4092-a9aa-d46ca3ba432c","method":"POST","headers":{":authority":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8685d9a8-8e19-4092-a9aa-d46ca3ba432c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8685d9a8-8e19-4092-a9aa-d46ca3ba432c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"]}} {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8685d9a8-8e19-4092-a9aa-d46ca3ba432c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8685d9a8-8e19-4092-a9aa-d46ca3ba432c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8685d9a8-8e19-4092-a9aa-d46ca3ba432c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8685d9a8-8e19-4092-a9aa-d46ca3ba432c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ee985/auth-test-model-8ee985\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ee985/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8685d9a8-8e19-4092-a9aa-d46ca3ba432c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8685d9a8-8e19-4092-a9aa-d46ca3ba432c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8685d9a8-8e19-4092-a9aa-d46ca3ba432c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8685d9a8-8e19-4092-a9aa-d46ca3ba432c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8685d9a8-8e19-4092-a9aa-d46ca3ba432c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a4d9bf4-f104-4fdf-b3aa-0c03bc6d98a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46798","PortSpecifier":{"PortValue":46798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a4d9bf4-f104-4fdf-b3aa-0c03bc6d98a9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a4d9bf4-f104-4fdf-b3aa-0c03bc6d98a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46798","PortSpecifier":{"PortValue":46798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832220,"nanos":750496494},"http":{"id":"7a4d9bf4-f104-4fdf-b3aa-0c03bc6d98a9","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7a4d9bf4-f104-4fdf-b3aa-0c03bc6d98a9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aMYOH2uTvpiCTG8L_dHulql669qnDrG807abODX9hp4lKPqpQtblg8G3HYZr"} {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7a4d9bf4-f104-4fdf-b3aa-0c03bc6d98a9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1aMYOH2uTvpiCTG8L_dHulql669qnDrG807abODX9hp4lKPqpQtblg8G3HYZr\"}"} {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7a4d9bf4-f104-4fdf-b3aa-0c03bc6d98a9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3a39a708-c9ad-4dc4-8e78-249746e15701","keyName":"e2e-auth-iso-a-58e2b4","subscription":"e2e-auth-iso-721186","tenant":"e2e-shared-a-5f06b1","userId":"3a39a708-c9ad-4dc4-8e78-249746e15701","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7a4d9bf4-f104-4fdf-b3aa-0c03bc6d98a9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a4d9bf4-f104-4fdf-b3aa-0c03bc6d98a9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a4d9bf4-f104-4fdf-b3aa-0c03bc6d98a9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a4d9bf4-f104-4fdf-b3aa-0c03bc6d98a9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/auth-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a4d9bf4-f104-4fdf-b3aa-0c03bc6d98a9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a4d9bf4-f104-4fdf-b3aa-0c03bc6d98a9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-721186"} {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a4d9bf4-f104-4fdf-b3aa-0c03bc6d98a9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7a4d9bf4-f104-4fdf-b3aa-0c03bc6d98a9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a4d9bf4-f104-4fdf-b3aa-0c03bc6d98a9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:43:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a4d9bf4-f104-4fdf-b3aa-0c03bc6d98a9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:43:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b830269204a5e36e11442c7d4ade9fccddb2ae643c11b5bef4b763490ca6765"} {"level":"info","ts":"2026-07-23T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"} {"level":"info","ts":"2026-07-23T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b"} {"level":"info","ts":"2026-07-23T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"} {"level":"info","ts":"2026-07-23T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fc02baa41b3bb9b49958e9c22482a9ac03bd100fb9d658cd22b44168656469e"} {"level":"info","ts":"2026-07-23T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6"} {"level":"info","ts":"2026-07-23T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2bae3ee923f9e7ef9101c32698cf8adf0378b5fffd3a9240a5b28205c01a8b6"} {"level":"info","ts":"2026-07-23T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81e28cb41bfbaa91577e473876fa385266ab21dd5ed9198a561970739cd41725"} {"level":"info","ts":"2026-07-23T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b"} {"level":"info","ts":"2026-07-23T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3a2e4cf4f3c7d2ff1349e3db1bd7146a7bbc8d371eb14f9f1ebe58a68ae61a7"} {"level":"info","ts":"2026-07-23T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e22cbc545e582f86be91087ec81a194c6478369a0efed68d70c1d708d2c40986"} {"level":"info","ts":"2026-07-23T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff7a2677556d153cf1b58f5b79f7a9e777438799d6a9ec1b07c3f92e51a960ee"} {"level":"info","ts":"2026-07-23T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba876eaf928b4bc397358006d10bc0f13d7936606bb07a0ea6a669da4ff6d79f"} {"level":"info","ts":"2026-07-23T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a2466bdbe3dad5c6094cb264bc1ea560d231370bde2efaec3b00794d9465e6e"} {"level":"info","ts":"2026-07-23T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d"} {"level":"info","ts":"2026-07-23T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c596db1d13a87f53da85549f830875d2c94d54ce94850e60e1fa6a83b9b79280"} {"level":"info","ts":"2026-07-23T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"} {"level":"info","ts":"2026-07-23T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba23b79495c3f7d6b264656445c738bd5ab85b001774beee4f9040723149fb59"} {"level":"info","ts":"2026-07-23T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8dd665458fdcbbeb46ec183120ef86acdd09628bbea7e35166545a2f7385c47"} {"level":"info","ts":"2026-07-23T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"} {"level":"info","ts":"2026-07-23T18:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f12473e56a7bc20cd95e0c765906918395565384656923496924cc3b80be028"} {"level":"info","ts":"2026-07-23T18:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86543e42a1fa159c48a5e2a5ef003fc1e3bee5d78c36ed49ba7236251a41301a"} {"level":"info","ts":"2026-07-23T18:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4d6fbe625db4da8e6dba7bbfe591410c3a010ef4cc2829d438fe0ec0836e370"} {"level":"info","ts":"2026-07-23T18:43:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16e8a8754b0efa0cb86bae2e894216740370d96b280ea06b5907ee0261412d81"} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373"} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373"} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373"} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373"} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373"} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373"} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373"} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373"} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c640929ecb4d6bb70c54e56c7671c2f1cdaab605ffd639cc5b32844a60d74e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373"} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c640929ecb4d6bb70c54e56c7671c2f1cdaab605ffd639cc5b32844a60d74e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c640929ecb4d6bb70c54e56c7671c2f1cdaab605ffd639cc5b32844a60d74e8"} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c640929ecb4d6bb70c54e56c7671c2f1cdaab605ffd639cc5b32844a60d74e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c640929ecb4d6bb70c54e56c7671c2f1cdaab605ffd639cc5b32844a60d74e8"} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c640929ecb4d6bb70c54e56c7671c2f1cdaab605ffd639cc5b32844a60d74e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c640929ecb4d6bb70c54e56c7671c2f1cdaab605ffd639cc5b32844a60d74e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c640929ecb4d6bb70c54e56c7671c2f1cdaab605ffd639cc5b32844a60d74e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373"} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c640929ecb4d6bb70c54e56c7671c2f1cdaab605ffd639cc5b32844a60d74e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c640929ecb4d6bb70c54e56c7671c2f1cdaab605ffd639cc5b32844a60d74e8"} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c640929ecb4d6bb70c54e56c7671c2f1cdaab605ffd639cc5b32844a60d74e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373"} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c640929ecb4d6bb70c54e56c7671c2f1cdaab605ffd639cc5b32844a60d74e8"} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373"} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373"} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373"} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373"} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373"} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373"} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093"} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093"} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373"} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093"} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093"} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093"} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093"} {"level":"debug","ts":"2026-07-23T18:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093"} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3"} {"level":"error","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3"} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3"} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3"} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3"} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3"} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3"} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"631235e7efe0e7aed5f44ac5a978a0c09d483f85c67a486400040661a6763342","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"631235e7efe0e7aed5f44ac5a978a0c09d483f85c67a486400040661a6763342","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3"} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"631235e7efe0e7aed5f44ac5a978a0c09d483f85c67a486400040661a6763342","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/631235e7efe0e7aed5f44ac5a978a0c09d483f85c67a486400040661a6763342"} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"631235e7efe0e7aed5f44ac5a978a0c09d483f85c67a486400040661a6763342","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e7151de63c88517f964222abf385448c60a9500acb9024094c132a1ce41702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e7151de63c88517f964222abf385448c60a9500acb9024094c132a1ce41702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"631235e7efe0e7aed5f44ac5a978a0c09d483f85c67a486400040661a6763342","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["631235e7efe0e7aed5f44ac5a978a0c09d483f85c67a486400040661a6763342"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3"} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"631235e7efe0e7aed5f44ac5a978a0c09d483f85c67a486400040661a6763342","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e7151de63c88517f964222abf385448c60a9500acb9024094c132a1ce41702"} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e7151de63c88517f964222abf385448c60a9500acb9024094c132a1ce41702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5e7151de63c88517f964222abf385448c60a9500acb9024094c132a1ce41702"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e7151de63c88517f964222abf385448c60a9500acb9024094c132a1ce41702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"631235e7efe0e7aed5f44ac5a978a0c09d483f85c67a486400040661a6763342","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/631235e7efe0e7aed5f44ac5a978a0c09d483f85c67a486400040661a6763342"} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"631235e7efe0e7aed5f44ac5a978a0c09d483f85c67a486400040661a6763342","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3"} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e7151de63c88517f964222abf385448c60a9500acb9024094c132a1ce41702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e7151de63c88517f964222abf385448c60a9500acb9024094c132a1ce41702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"631235e7efe0e7aed5f44ac5a978a0c09d483f85c67a486400040661a6763342","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["631235e7efe0e7aed5f44ac5a978a0c09d483f85c67a486400040661a6763342"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e7151de63c88517f964222abf385448c60a9500acb9024094c132a1ce41702"} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"631235e7efe0e7aed5f44ac5a978a0c09d483f85c67a486400040661a6763342","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e7151de63c88517f964222abf385448c60a9500acb9024094c132a1ce41702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5e7151de63c88517f964222abf385448c60a9500acb9024094c132a1ce41702"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/631235e7efe0e7aed5f44ac5a978a0c09d483f85c67a486400040661a6763342"} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e7151de63c88517f964222abf385448c60a9500acb9024094c132a1ce41702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"631235e7efe0e7aed5f44ac5a978a0c09d483f85c67a486400040661a6763342","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3"} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e7151de63c88517f964222abf385448c60a9500acb9024094c132a1ce41702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e7151de63c88517f964222abf385448c60a9500acb9024094c132a1ce41702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e7151de63c88517f964222abf385448c60a9500acb9024094c132a1ce41702"} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e7151de63c88517f964222abf385448c60a9500acb9024094c132a1ce41702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5e7151de63c88517f964222abf385448c60a9500acb9024094c132a1ce41702"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/631235e7efe0e7aed5f44ac5a978a0c09d483f85c67a486400040661a6763342"} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e7151de63c88517f964222abf385448c60a9500acb9024094c132a1ce41702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3"} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e7151de63c88517f964222abf385448c60a9500acb9024094c132a1ce41702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e7151de63c88517f964222abf385448c60a9500acb9024094c132a1ce41702"} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e7151de63c88517f964222abf385448c60a9500acb9024094c132a1ce41702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e7151de63c88517f964222abf385448c60a9500acb9024094c132a1ce41702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5e7151de63c88517f964222abf385448c60a9500acb9024094c132a1ce41702"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3"} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e7151de63c88517f964222abf385448c60a9500acb9024094c132a1ce41702"} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e7151de63c88517f964222abf385448c60a9500acb9024094c132a1ce41702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b"} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e7151de63c88517f964222abf385448c60a9500acb9024094c132a1ce41702"} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3"} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aed47179dde2add593955ce3119642ba518e444b61ef5b11bfd2b3b91d67482"} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5e7151de63c88517f964222abf385448c60a9500acb9024094c132a1ce41702","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aed47179dde2add593955ce3119642ba518e444b61ef5b11bfd2b3b91d67482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5aed47179dde2add593955ce3119642ba518e444b61ef5b11bfd2b3b91d67482"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0b9f3a78787c0aeca8e6a9f38dfa6daa049ffeb8a0e9c7a354cba9c08c669bc"} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b"} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aed47179dde2add593955ce3119642ba518e444b61ef5b11bfd2b3b91d67482","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0b9f3a78787c0aeca8e6a9f38dfa6daa049ffeb8a0e9c7a354cba9c08c669bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0b9f3a78787c0aeca8e6a9f38dfa6daa049ffeb8a0e9c7a354cba9c08c669bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c0ab9658171a4bf5498dd5856682c9aa18faf133484f18584516dafc7f24214"} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d"} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aed47179dde2add593955ce3119642ba518e444b61ef5b11bfd2b3b91d67482"} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0b9f3a78787c0aeca8e6a9f38dfa6daa049ffeb8a0e9c7a354cba9c08c669bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b"} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c0ab9658171a4bf5498dd5856682c9aa18faf133484f18584516dafc7f24214","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c0ab9658171a4bf5498dd5856682c9aa18faf133484f18584516dafc7f24214"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0b9f3a78787c0aeca8e6a9f38dfa6daa049ffeb8a0e9c7a354cba9c08c669bc"} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22c595bff6fe7a4cbc6f1960d9b39c3613f706d931d613d89bdf50c584c963cc"} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c0ab9658171a4bf5498dd5856682c9aa18faf133484f18584516dafc7f24214","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6"} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5aed47179dde2add593955ce3119642ba518e444b61ef5b11bfd2b3b91d67482","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11a920d9590974c06b8f536e6ae1b14f4f03268ae48e818439f005d22521d808"} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/278e72279fd618ac0968e831bf247f540ef9268fd65b395da98e4df31bb618fc"} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17debe74e1f45415bda95d7bc28416c89a98372f7b73d3548f862ecd7f6d7891"} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c0ab9658171a4bf5498dd5856682c9aa18faf133484f18584516dafc7f24214"} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0b9f3a78787c0aeca8e6a9f38dfa6daa049ffeb8a0e9c7a354cba9c08c669bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22c595bff6fe7a4cbc6f1960d9b39c3613f706d931d613d89bdf50c584c963cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22c595bff6fe7a4cbc6f1960d9b39c3613f706d931d613d89bdf50c584c963cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d"} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22c595bff6fe7a4cbc6f1960d9b39c3613f706d931d613d89bdf50c584c963cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd95b0574a2442cc4739f8851af31559692503e1bcc53e4a4b0a9194f12a5de"} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11a920d9590974c06b8f536e6ae1b14f4f03268ae48e818439f005d22521d808","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11a920d9590974c06b8f536e6ae1b14f4f03268ae48e818439f005d22521d808"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac106c8bff7411b0d91fcf73d66e6170b8916cbbf4306c0a1e100aa6ce610cb8"} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11a920d9590974c06b8f536e6ae1b14f4f03268ae48e818439f005d22521d808","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"278e72279fd618ac0968e831bf247f540ef9268fd65b395da98e4df31bb618fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["278e72279fd618ac0968e831bf247f540ef9268fd65b395da98e4df31bb618fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b"} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22c595bff6fe7a4cbc6f1960d9b39c3613f706d931d613d89bdf50c584c963cc"} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"278e72279fd618ac0968e831bf247f540ef9268fd65b395da98e4df31bb618fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17debe74e1f45415bda95d7bc28416c89a98372f7b73d3548f862ecd7f6d7891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17debe74e1f45415bda95d7bc28416c89a98372f7b73d3548f862ecd7f6d7891"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6"} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11a920d9590974c06b8f536e6ae1b14f4f03268ae48e818439f005d22521d808"} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17debe74e1f45415bda95d7bc28416c89a98372f7b73d3548f862ecd7f6d7891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c0ab9658171a4bf5498dd5856682c9aa18faf133484f18584516dafc7f24214","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/278e72279fd618ac0968e831bf247f540ef9268fd65b395da98e4df31bb618fc"} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17debe74e1f45415bda95d7bc28416c89a98372f7b73d3548f862ecd7f6d7891"} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd95b0574a2442cc4739f8851af31559692503e1bcc53e4a4b0a9194f12a5de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fd95b0574a2442cc4739f8851af31559692503e1bcc53e4a4b0a9194f12a5de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd95b0574a2442cc4739f8851af31559692503e1bcc53e4a4b0a9194f12a5de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac106c8bff7411b0d91fcf73d66e6170b8916cbbf4306c0a1e100aa6ce610cb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac106c8bff7411b0d91fcf73d66e6170b8916cbbf4306c0a1e100aa6ce610cb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd95b0574a2442cc4739f8851af31559692503e1bcc53e4a4b0a9194f12a5de"} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac106c8bff7411b0d91fcf73d66e6170b8916cbbf4306c0a1e100aa6ce610cb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22c595bff6fe7a4cbc6f1960d9b39c3613f706d931d613d89bdf50c584c963cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11a920d9590974c06b8f536e6ae1b14f4f03268ae48e818439f005d22521d808","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"278e72279fd618ac0968e831bf247f540ef9268fd65b395da98e4df31bb618fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17debe74e1f45415bda95d7bc28416c89a98372f7b73d3548f862ecd7f6d7891","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd95b0574a2442cc4739f8851af31559692503e1bcc53e4a4b0a9194f12a5de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac106c8bff7411b0d91fcf73d66e6170b8916cbbf4306c0a1e100aa6ce610cb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac106c8bff7411b0d91fcf73d66e6170b8916cbbf4306c0a1e100aa6ce610cb8"} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac106c8bff7411b0d91fcf73d66e6170b8916cbbf4306c0a1e100aa6ce610cb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac106c8bff7411b0d91fcf73d66e6170b8916cbbf4306c0a1e100aa6ce610cb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac106c8bff7411b0d91fcf73d66e6170b8916cbbf4306c0a1e100aa6ce610cb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac106c8bff7411b0d91fcf73d66e6170b8916cbbf4306c0a1e100aa6ce610cb8"} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac106c8bff7411b0d91fcf73d66e6170b8916cbbf4306c0a1e100aa6ce610cb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac106c8bff7411b0d91fcf73d66e6170b8916cbbf4306c0a1e100aa6ce610cb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac106c8bff7411b0d91fcf73d66e6170b8916cbbf4306c0a1e100aa6ce610cb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac106c8bff7411b0d91fcf73d66e6170b8916cbbf4306c0a1e100aa6ce610cb8"} {"level":"error","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ac106c8bff7411b0d91fcf73d66e6170b8916cbbf4306c0a1e100aa6ce610cb8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ac106c8bff7411b0d91fcf73d66e6170b8916cbbf4306c0a1e100aa6ce610cb8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac106c8bff7411b0d91fcf73d66e6170b8916cbbf4306c0a1e100aa6ce610cb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac106c8bff7411b0d91fcf73d66e6170b8916cbbf4306c0a1e100aa6ce610cb8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99b06c0a-93ce-4e1d-98cb-374811e0d086","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55394","PortSpecifier":{"PortValue":55394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"99b06c0a-93ce-4e1d-98cb-374811e0d086","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99b06c0a-93ce-4e1d-98cb-374811e0d086","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55394","PortSpecifier":{"PortValue":55394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832310,"nanos":810169240},"http":{"id":"99b06c0a-93ce-4e1d-98cb-374811e0d086","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"99b06c0a-93ce-4e1d-98cb-374811e0d086","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"99b06c0a-93ce-4e1d-98cb-374811e0d086","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"]}} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"99b06c0a-93ce-4e1d-98cb-374811e0d086","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99b06c0a-93ce-4e1d-98cb-374811e0d086","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99b06c0a-93ce-4e1d-98cb-374811e0d086","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99b06c0a-93ce-4e1d-98cb-374811e0d086","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/sub-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"99b06c0a-93ce-4e1d-98cb-374811e0d086","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99b06c0a-93ce-4e1d-98cb-374811e0d086","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99b06c0a-93ce-4e1d-98cb-374811e0d086","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99b06c0a-93ce-4e1d-98cb-374811e0d086","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99b06c0a-93ce-4e1d-98cb-374811e0d086","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e7e5cad-d548-437e-a460-3825415bd0bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40648","PortSpecifier":{"PortValue":40648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5e7e5cad-d548-437e-a460-3825415bd0bb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e7e5cad-d548-437e-a460-3825415bd0bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40648","PortSpecifier":{"PortValue":40648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832310,"nanos":856085519},"http":{"id":"5e7e5cad-d548-437e-a460-3825415bd0bb","method":"POST","headers":{":authority":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5e7e5cad-d548-437e-a460-3825415bd0bb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5e7e5cad-d548-437e-a460-3825415bd0bb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"]}} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5e7e5cad-d548-437e-a460-3825415bd0bb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e7e5cad-d548-437e-a460-3825415bd0bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e7e5cad-d548-437e-a460-3825415bd0bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e7e5cad-d548-437e-a460-3825415bd0bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ee985/sub-test-model-8ee985\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ee985/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5e7e5cad-d548-437e-a460-3825415bd0bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e7e5cad-d548-437e-a460-3825415bd0bb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e7e5cad-d548-437e-a460-3825415bd0bb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e7e5cad-d548-437e-a460-3825415bd0bb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e7e5cad-d548-437e-a460-3825415bd0bb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afbe9527-a540-4972-9186-90ac91434a24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55404","PortSpecifier":{"PortValue":55404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"afbe9527-a540-4972-9186-90ac91434a24","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afbe9527-a540-4972-9186-90ac91434a24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55404","PortSpecifier":{"PortValue":55404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832310,"nanos":895473649},"http":{"id":"afbe9527-a540-4972-9186-90ac91434a24","method":"GET","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"afbe9527-a540-4972-9186-90ac91434a24","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EHqkF5K3LjgrN1JO_uXryOfywrWPhfAF3ys3rKspvbAUcw2BV4CHezO1sZte"} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"afbe9527-a540-4972-9186-90ac91434a24","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EHqkF5K3LjgrN1JO_uXryOfywrWPhfAF3ys3rKspvbAUcw2BV4CHezO1sZte\"}"} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"afbe9527-a540-4972-9186-90ac91434a24","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ac4e70f-164c-4def-82c4-d7e7694e30ee","keyName":"e2e-sub-iso-fe0d07","subscription":"e2e-a-only-438889","tenant":"e2e-shared-a-5f06b1","userId":"9ac4e70f-164c-4def-82c4-d7e7694e30ee","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"afbe9527-a540-4972-9186-90ac91434a24","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afbe9527-a540-4972-9186-90ac91434a24","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afbe9527-a540-4972-9186-90ac91434a24","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afbe9527-a540-4972-9186-90ac91434a24","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/sub-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"afbe9527-a540-4972-9186-90ac91434a24","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afbe9527-a540-4972-9186-90ac91434a24","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afbe9527-a540-4972-9186-90ac91434a24","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afbe9527-a540-4972-9186-90ac91434a24","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-438889"} {"level":"info","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afbe9527-a540-4972-9186-90ac91434a24","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afbe9527-a540-4972-9186-90ac91434a24","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f353efaf-038a-4aca-b143-fe6f1d83e636","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40658","PortSpecifier":{"PortValue":40658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f353efaf-038a-4aca-b143-fe6f1d83e636","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f353efaf-038a-4aca-b143-fe6f1d83e636","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40658","PortSpecifier":{"PortValue":40658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832310,"nanos":938504036},"http":{"id":"f353efaf-038a-4aca-b143-fe6f1d83e636","method":"GET","headers":{":authority":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f353efaf-038a-4aca-b143-fe6f1d83e636","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2n45JXcW79uwVtkQ_WivA84UcbLoH9CkwECp11xU9pfmqCGmEebQQVIptNMi"} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f353efaf-038a-4aca-b143-fe6f1d83e636","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-8ee985.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2n45JXcW79uwVtkQ_WivA84UcbLoH9CkwECp11xU9pfmqCGmEebQQVIptNMi\"}"} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f353efaf-038a-4aca-b143-fe6f1d83e636","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8ee985.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"411b1e7e-c5a5-4dd0-a844-c2f4f63708ba","keyName":"e2e-sub-iso-e396cd","subscription":"e2e-b-only-438889","tenant":"e2e-shared-b-8ee985","userId":"411b1e7e-c5a5-4dd0-a844-c2f4f63708ba","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f353efaf-038a-4aca-b143-fe6f1d83e636","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f353efaf-038a-4aca-b143-fe6f1d83e636","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f353efaf-038a-4aca-b143-fe6f1d83e636","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f353efaf-038a-4aca-b143-fe6f1d83e636","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ee985/sub-test-model-8ee985\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ee985/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f353efaf-038a-4aca-b143-fe6f1d83e636","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f353efaf-038a-4aca-b143-fe6f1d83e636","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f353efaf-038a-4aca-b143-fe6f1d83e636","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f353efaf-038a-4aca-b143-fe6f1d83e636","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-438889"} {"level":"info","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f353efaf-038a-4aca-b143-fe6f1d83e636","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:45:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f353efaf-038a-4aca-b143-fe6f1d83e636","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78321243-4eca-496c-8982-61417902a028","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53368","PortSpecifier":{"PortValue":53368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78321243-4eca-496c-8982-61417902a028","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78321243-4eca-496c-8982-61417902a028","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53368","PortSpecifier":{"PortValue":53368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832332,"nanos":39854549},"http":{"id":"78321243-4eca-496c-8982-61417902a028","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"78321243-4eca-496c-8982-61417902a028","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78321243-4eca-496c-8982-61417902a028","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"]}} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78321243-4eca-496c-8982-61417902a028","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78321243-4eca-496c-8982-61417902a028","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78321243-4eca-496c-8982-61417902a028","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78321243-4eca-496c-8982-61417902a028","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/sub-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"78321243-4eca-496c-8982-61417902a028","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78321243-4eca-496c-8982-61417902a028","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78321243-4eca-496c-8982-61417902a028","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78321243-4eca-496c-8982-61417902a028","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78321243-4eca-496c-8982-61417902a028","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e2d6b49-8d0d-4b7c-8853-350ce3552d5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46660","PortSpecifier":{"PortValue":46660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5e2d6b49-8d0d-4b7c-8853-350ce3552d5b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e2d6b49-8d0d-4b7c-8853-350ce3552d5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46660","PortSpecifier":{"PortValue":46660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832332,"nanos":78054837},"http":{"id":"5e2d6b49-8d0d-4b7c-8853-350ce3552d5b","method":"POST","headers":{":authority":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5e2d6b49-8d0d-4b7c-8853-350ce3552d5b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5e2d6b49-8d0d-4b7c-8853-350ce3552d5b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"]}} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5e2d6b49-8d0d-4b7c-8853-350ce3552d5b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e2d6b49-8d0d-4b7c-8853-350ce3552d5b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e2d6b49-8d0d-4b7c-8853-350ce3552d5b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e2d6b49-8d0d-4b7c-8853-350ce3552d5b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ee985/sub-test-model-8ee985\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ee985/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5e2d6b49-8d0d-4b7c-8853-350ce3552d5b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e2d6b49-8d0d-4b7c-8853-350ce3552d5b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e2d6b49-8d0d-4b7c-8853-350ce3552d5b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e2d6b49-8d0d-4b7c-8853-350ce3552d5b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e2d6b49-8d0d-4b7c-8853-350ce3552d5b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1655a955-c416-4428-bc61-400c53dda5dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53378","PortSpecifier":{"PortValue":53378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1655a955-c416-4428-bc61-400c53dda5dd","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1655a955-c416-4428-bc61-400c53dda5dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53378","PortSpecifier":{"PortValue":53378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832332,"nanos":119432940},"http":{"id":"1655a955-c416-4428-bc61-400c53dda5dd","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1655a955-c416-4428-bc61-400c53dda5dd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AOz0fkEj46RM0t8v_eila63h3zcbpCsFyJpM8PSbjPsy4bMIlpBO4Ma1m8IB"} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1655a955-c416-4428-bc61-400c53dda5dd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AOz0fkEj46RM0t8v_eila63h3zcbpCsFyJpM8PSbjPsy4bMIlpBO4Ma1m8IB\"}"} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1655a955-c416-4428-bc61-400c53dda5dd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"609f45a4-575f-49b2-8570-88ecde3a2c11","keyName":"e2e-sub-iso-03907f","subscription":"e2e-shared-sub-706abe","tenant":"e2e-shared-a-5f06b1","userId":"609f45a4-575f-49b2-8570-88ecde3a2c11","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1655a955-c416-4428-bc61-400c53dda5dd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1655a955-c416-4428-bc61-400c53dda5dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1655a955-c416-4428-bc61-400c53dda5dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1655a955-c416-4428-bc61-400c53dda5dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/sub-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1655a955-c416-4428-bc61-400c53dda5dd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1655a955-c416-4428-bc61-400c53dda5dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1655a955-c416-4428-bc61-400c53dda5dd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1655a955-c416-4428-bc61-400c53dda5dd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-706abe"} {"level":"info","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1655a955-c416-4428-bc61-400c53dda5dd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1655a955-c416-4428-bc61-400c53dda5dd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd3b3e3b-afaa-43e5-bdf9-47a1336396a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46664","PortSpecifier":{"PortValue":46664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd3b3e3b-afaa-43e5-bdf9-47a1336396a6","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd3b3e3b-afaa-43e5-bdf9-47a1336396a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46664","PortSpecifier":{"PortValue":46664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832332,"nanos":149888509},"http":{"id":"fd3b3e3b-afaa-43e5-bdf9-47a1336396a6","method":"POST","headers":{":authority":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd3b3e3b-afaa-43e5-bdf9-47a1336396a6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZkQtjR2LoZ37z0yJ_l8pwipFfgrVfIfq2RlbACUkxevFWAKnfafNK1L04mmr"} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fd3b3e3b-afaa-43e5-bdf9-47a1336396a6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-8ee985.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZkQtjR2LoZ37z0yJ_l8pwipFfgrVfIfq2RlbACUkxevFWAKnfafNK1L04mmr\"}"} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fd3b3e3b-afaa-43e5-bdf9-47a1336396a6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8ee985.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"72b412dc-fafd-4261-a880-7fcd9ad9c965","keyName":"e2e-sub-iso-fc2b7a","subscription":"e2e-shared-sub-706abe","tenant":"e2e-shared-b-8ee985","userId":"72b412dc-fafd-4261-a880-7fcd9ad9c965","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd3b3e3b-afaa-43e5-bdf9-47a1336396a6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd3b3e3b-afaa-43e5-bdf9-47a1336396a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd3b3e3b-afaa-43e5-bdf9-47a1336396a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd3b3e3b-afaa-43e5-bdf9-47a1336396a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ee985/sub-test-model-8ee985\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ee985/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd3b3e3b-afaa-43e5-bdf9-47a1336396a6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-706abe"} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd3b3e3b-afaa-43e5-bdf9-47a1336396a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd3b3e3b-afaa-43e5-bdf9-47a1336396a6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd3b3e3b-afaa-43e5-bdf9-47a1336396a6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd3b3e3b-afaa-43e5-bdf9-47a1336396a6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:45:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd3b3e3b-afaa-43e5-bdf9-47a1336396a6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"} {"level":"info","ts":"2026-07-23T18:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6"} {"level":"info","ts":"2026-07-23T18:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11a920d9590974c06b8f536e6ae1b14f4f03268ae48e818439f005d22521d808"} {"level":"info","ts":"2026-07-23T18:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac106c8bff7411b0d91fcf73d66e6170b8916cbbf4306c0a1e100aa6ce610cb8"} {"level":"info","ts":"2026-07-23T18:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"} {"level":"info","ts":"2026-07-23T18:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17debe74e1f45415bda95d7bc28416c89a98372f7b73d3548f862ecd7f6d7891"} {"level":"info","ts":"2026-07-23T18:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b"} {"level":"info","ts":"2026-07-23T18:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65086a9fe69a4347de35169fcae296e35ffbce949565a4ec371b2b2e20f054f3"} {"level":"info","ts":"2026-07-23T18:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e59597fca11e3eb5fd2cadc12a5b1e4b6a0293189f2f8aaea6fef589248f5093"} {"level":"info","ts":"2026-07-23T18:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c8f94ee931a3fc712788b44ccce999859ed1fca11d5b9ea870327cb175d43a3"} {"level":"info","ts":"2026-07-23T18:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"} {"level":"info","ts":"2026-07-23T18:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c640929ecb4d6bb70c54e56c7671c2f1cdaab605ffd639cc5b32844a60d74e8"} {"level":"info","ts":"2026-07-23T18:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5e7151de63c88517f964222abf385448c60a9500acb9024094c132a1ce41702"} {"level":"info","ts":"2026-07-23T18:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c0ab9658171a4bf5498dd5856682c9aa18faf133484f18584516dafc7f24214"} {"level":"info","ts":"2026-07-23T18:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fd95b0574a2442cc4739f8851af31559692503e1bcc53e4a4b0a9194f12a5de"} {"level":"info","ts":"2026-07-23T18:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b"} {"level":"info","ts":"2026-07-23T18:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d"} {"level":"info","ts":"2026-07-23T18:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5aed47179dde2add593955ce3119642ba518e444b61ef5b11bfd2b3b91d67482"} {"level":"info","ts":"2026-07-23T18:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/278e72279fd618ac0968e831bf247f540ef9268fd65b395da98e4df31bb618fc"} {"level":"info","ts":"2026-07-23T18:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/814f9e45214d598c327e86517994d921e80ef25dd3e2572ff6bc1b8596415373"} {"level":"info","ts":"2026-07-23T18:45:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0b9f3a78787c0aeca8e6a9f38dfa6daa049ffeb8a0e9c7a354cba9c08c669bc"} {"level":"info","ts":"2026-07-23T18:45:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/631235e7efe0e7aed5f44ac5a978a0c09d483f85c67a486400040661a6763342"} {"level":"info","ts":"2026-07-23T18:45:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"} {"level":"info","ts":"2026-07-23T18:45:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22c595bff6fe7a4cbc6f1960d9b39c3613f706d931d613d89bdf50c584c963cc"} {"level":"debug","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1"} {"level":"debug","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1"} {"level":"debug","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1"} {"level":"debug","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1"} {"level":"debug","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1"} {"level":"debug","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f"} {"level":"info","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f"} {"level":"debug","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f"} {"level":"info","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f"} {"level":"debug","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f"} {"level":"info","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a55677f61f25defb2de0cb8e1f3e90d4c981f2ec8deb66d6c4fea066adfe59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34a55677f61f25defb2de0cb8e1f3e90d4c981f2ec8deb66d6c4fea066adfe59"} {"level":"info","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f"} {"level":"info","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a55677f61f25defb2de0cb8e1f3e90d4c981f2ec8deb66d6c4fea066adfe59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34a55677f61f25defb2de0cb8e1f3e90d4c981f2ec8deb66d6c4fea066adfe59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34a55677f61f25defb2de0cb8e1f3e90d4c981f2ec8deb66d6c4fea066adfe59"} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f"} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34a55677f61f25defb2de0cb8e1f3e90d4c981f2ec8deb66d6c4fea066adfe59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34a55677f61f25defb2de0cb8e1f3e90d4c981f2ec8deb66d6c4fea066adfe59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34a55677f61f25defb2de0cb8e1f3e90d4c981f2ec8deb66d6c4fea066adfe59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34a55677f61f25defb2de0cb8e1f3e90d4c981f2ec8deb66d6c4fea066adfe59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34a55677f61f25defb2de0cb8e1f3e90d4c981f2ec8deb66d6c4fea066adfe59"} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8517b734c65e88cd33ed731812dec0d9dd953522f930d78e7c066e1a7b60761","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8517b734c65e88cd33ed731812dec0d9dd953522f930d78e7c066e1a7b60761","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8517b734c65e88cd33ed731812dec0d9dd953522f930d78e7c066e1a7b60761","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8517b734c65e88cd33ed731812dec0d9dd953522f930d78e7c066e1a7b60761"} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8517b734c65e88cd33ed731812dec0d9dd953522f930d78e7c066e1a7b60761","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8517b734c65e88cd33ed731812dec0d9dd953522f930d78e7c066e1a7b60761"} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8517b734c65e88cd33ed731812dec0d9dd953522f930d78e7c066e1a7b60761","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8517b734c65e88cd33ed731812dec0d9dd953522f930d78e7c066e1a7b60761"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8517b734c65e88cd33ed731812dec0d9dd953522f930d78e7c066e1a7b60761","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8517b734c65e88cd33ed731812dec0d9dd953522f930d78e7c066e1a7b60761","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8517b734c65e88cd33ed731812dec0d9dd953522f930d78e7c066e1a7b60761"} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8517b734c65e88cd33ed731812dec0d9dd953522f930d78e7c066e1a7b60761","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8517b734c65e88cd33ed731812dec0d9dd953522f930d78e7c066e1a7b60761","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8517b734c65e88cd33ed731812dec0d9dd953522f930d78e7c066e1a7b60761"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8517b734c65e88cd33ed731812dec0d9dd953522f930d78e7c066e1a7b60761","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8517b734c65e88cd33ed731812dec0d9dd953522f930d78e7c066e1a7b60761","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8517b734c65e88cd33ed731812dec0d9dd953522f930d78e7c066e1a7b60761"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d8517b734c65e88cd33ed731812dec0d9dd953522f930d78e7c066e1a7b60761","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d8517b734c65e88cd33ed731812dec0d9dd953522f930d78e7c066e1a7b60761\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8517b734c65e88cd33ed731812dec0d9dd953522f930d78e7c066e1a7b60761","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8517b734c65e88cd33ed731812dec0d9dd953522f930d78e7c066e1a7b60761","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8517b734c65e88cd33ed731812dec0d9dd953522f930d78e7c066e1a7b60761"} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb6da33df27fcad50e2e369ca9a410cd612648f4c9c36f435d72b7ced9df22a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb6da33df27fcad50e2e369ca9a410cd612648f4c9c36f435d72b7ced9df22a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb6da33df27fcad50e2e369ca9a410cd612648f4c9c36f435d72b7ced9df22a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb6da33df27fcad50e2e369ca9a410cd612648f4c9c36f435d72b7ced9df22a1"} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb6da33df27fcad50e2e369ca9a410cd612648f4c9c36f435d72b7ced9df22a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb6da33df27fcad50e2e369ca9a410cd612648f4c9c36f435d72b7ced9df22a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fb6da33df27fcad50e2e369ca9a410cd612648f4c9c36f435d72b7ced9df22a1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fb6da33df27fcad50e2e369ca9a410cd612648f4c9c36f435d72b7ced9df22a1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb6da33df27fcad50e2e369ca9a410cd612648f4c9c36f435d72b7ced9df22a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb6da33df27fcad50e2e369ca9a410cd612648f4c9c36f435d72b7ced9df22a1"} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb6da33df27fcad50e2e369ca9a410cd612648f4c9c36f435d72b7ced9df22a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb6da33df27fcad50e2e369ca9a410cd612648f4c9c36f435d72b7ced9df22a1"} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb6da33df27fcad50e2e369ca9a410cd612648f4c9c36f435d72b7ced9df22a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb6da33df27fcad50e2e369ca9a410cd612648f4c9c36f435d72b7ced9df22a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb6da33df27fcad50e2e369ca9a410cd612648f4c9c36f435d72b7ced9df22a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb6da33df27fcad50e2e369ca9a410cd612648f4c9c36f435d72b7ced9df22a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb6da33df27fcad50e2e369ca9a410cd612648f4c9c36f435d72b7ced9df22a1"} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6"} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"} {"level":"error","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6"} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1afbf90ef38eb2d9d497a4c5d9dd50e3966e40d838591b9735f7d15542ad63af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f"} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1afbf90ef38eb2d9d497a4c5d9dd50e3966e40d838591b9735f7d15542ad63af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1afbf90ef38eb2d9d497a4c5d9dd50e3966e40d838591b9735f7d15542ad63af"} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1afbf90ef38eb2d9d497a4c5d9dd50e3966e40d838591b9735f7d15542ad63af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1afbf90ef38eb2d9d497a4c5d9dd50e3966e40d838591b9735f7d15542ad63af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1afbf90ef38eb2d9d497a4c5d9dd50e3966e40d838591b9735f7d15542ad63af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f"} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1afbf90ef38eb2d9d497a4c5d9dd50e3966e40d838591b9735f7d15542ad63af"} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1afbf90ef38eb2d9d497a4c5d9dd50e3966e40d838591b9735f7d15542ad63af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f"} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6"} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b"} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f"} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b"} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f"} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0db0580c6c7b8860688fee14a48af8ec13b249f95f9c1b6e598fae87eacb640","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4"} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0db0580c6c7b8860688fee14a48af8ec13b249f95f9c1b6e598fae87eacb640","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b"} {"level":"info","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0db0580c6c7b8860688fee14a48af8ec13b249f95f9c1b6e598fae87eacb640","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0db0580c6c7b8860688fee14a48af8ec13b249f95f9c1b6e598fae87eacb640"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0db0580c6c7b8860688fee14a48af8ec13b249f95f9c1b6e598fae87eacb640","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f"} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0db0580c6c7b8860688fee14a48af8ec13b249f95f9c1b6e598fae87eacb640","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0db0580c6c7b8860688fee14a48af8ec13b249f95f9c1b6e598fae87eacb640"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0db0580c6c7b8860688fee14a48af8ec13b249f95f9c1b6e598fae87eacb640","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0db0580c6c7b8860688fee14a48af8ec13b249f95f9c1b6e598fae87eacb640"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0db0580c6c7b8860688fee14a48af8ec13b249f95f9c1b6e598fae87eacb640","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3378bbcbbab0d9e952daa562daaf6b6b9cce7ebf8057aad042b3a839ebc9125c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3378bbcbbab0d9e952daa562daaf6b6b9cce7ebf8057aad042b3a839ebc9125c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3378bbcbbab0d9e952daa562daaf6b6b9cce7ebf8057aad042b3a839ebc9125c"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3378bbcbbab0d9e952daa562daaf6b6b9cce7ebf8057aad042b3a839ebc9125c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3378bbcbbab0d9e952daa562daaf6b6b9cce7ebf8057aad042b3a839ebc9125c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3378bbcbbab0d9e952daa562daaf6b6b9cce7ebf8057aad042b3a839ebc9125c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/106b733a939aa14f12c0e5d87b0b5b160a2e16f458f241c1d817925f74c73e1d"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3378bbcbbab0d9e952daa562daaf6b6b9cce7ebf8057aad042b3a839ebc9125c"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d53649ceba88dd296f673a633156c03084542dc7caf46884735407941dd4a13f"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"106b733a939aa14f12c0e5d87b0b5b160a2e16f458f241c1d817925f74c73e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["106b733a939aa14f12c0e5d87b0b5b160a2e16f458f241c1d817925f74c73e1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"106b733a939aa14f12c0e5d87b0b5b160a2e16f458f241c1d817925f74c73e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3378bbcbbab0d9e952daa562daaf6b6b9cce7ebf8057aad042b3a839ebc9125c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/106b733a939aa14f12c0e5d87b0b5b160a2e16f458f241c1d817925f74c73e1d"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d53649ceba88dd296f673a633156c03084542dc7caf46884735407941dd4a13f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d53649ceba88dd296f673a633156c03084542dc7caf46884735407941dd4a13f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d53649ceba88dd296f673a633156c03084542dc7caf46884735407941dd4a13f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d53649ceba88dd296f673a633156c03084542dc7caf46884735407941dd4a13f"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"106b733a939aa14f12c0e5d87b0b5b160a2e16f458f241c1d817925f74c73e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d53649ceba88dd296f673a633156c03084542dc7caf46884735407941dd4a13f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058"} {"level":"info","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058"} {"level":"debug","ts":"2026-07-23T18:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058"} {"level":"info","ts":"2026-07-23T18:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058"} {"level":"debug","ts":"2026-07-23T18:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058"} {"level":"info","ts":"2026-07-23T18:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058"} {"level":"debug","ts":"2026-07-23T18:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058"} {"level":"info","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b370bf4f-ade2-4091-a860-562dbc14e11b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:44552","PortSpecifier":{"PortValue":44552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b370bf4f-ade2-4091-a860-562dbc14e11b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b370bf4f-ade2-4091-a860-562dbc14e11b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:44552","PortSpecifier":{"PortValue":44552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832434,"nanos":340147379},"http":{"id":"b370bf4f-ade2-4091-a860-562dbc14e11b","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b370bf4f-ade2-4091-a860-562dbc14e11b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b370bf4f-ade2-4091-a860-562dbc14e11b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"]}} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b370bf4f-ade2-4091-a860-562dbc14e11b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b370bf4f-ade2-4091-a860-562dbc14e11b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b370bf4f-ade2-4091-a860-562dbc14e11b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b370bf4f-ade2-4091-a860-562dbc14e11b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b370bf4f-ade2-4091-a860-562dbc14e11b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b370bf4f-ade2-4091-a860-562dbc14e11b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b370bf4f-ade2-4091-a860-562dbc14e11b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b370bf4f-ade2-4091-a860-562dbc14e11b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b370bf4f-ade2-4091-a860-562dbc14e11b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4275080d-416d-4a91-943b-774433b73f26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46612","PortSpecifier":{"PortValue":46612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4275080d-416d-4a91-943b-774433b73f26","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4275080d-416d-4a91-943b-774433b73f26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46612","PortSpecifier":{"PortValue":46612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832434,"nanos":393749869},"http":{"id":"4275080d-416d-4a91-943b-774433b73f26","method":"POST","headers":{":authority":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4275080d-416d-4a91-943b-774433b73f26","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4275080d-416d-4a91-943b-774433b73f26","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"]}} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4275080d-416d-4a91-943b-774433b73f26","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4275080d-416d-4a91-943b-774433b73f26","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4275080d-416d-4a91-943b-774433b73f26","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4275080d-416d-4a91-943b-774433b73f26","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ee985/rate-test-model-8ee985\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ee985/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4275080d-416d-4a91-943b-774433b73f26","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4275080d-416d-4a91-943b-774433b73f26","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4275080d-416d-4a91-943b-774433b73f26","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4275080d-416d-4a91-943b-774433b73f26","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4275080d-416d-4a91-943b-774433b73f26","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a01cfdb-43ac-42e7-a351-0144f157d47d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:44560","PortSpecifier":{"PortValue":44560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a01cfdb-43ac-42e7-a351-0144f157d47d","method":"POST","path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a01cfdb-43ac-42e7-a351-0144f157d47d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:44560","PortSpecifier":{"PortValue":44560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832434,"nanos":450604633},"http":{"id":"7a01cfdb-43ac-42e7-a351-0144f157d47d","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7a01cfdb-43ac-42e7-a351-0144f157d47d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RTQ9azvrHXNdROZg_boBDmA3ufhelD1EMTd6xItVovxa5IC2f3gxZJpXUuaZ"} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7a01cfdb-43ac-42e7-a351-0144f157d47d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RTQ9azvrHXNdROZg_boBDmA3ufhelD1EMTd6xItVovxa5IC2f3gxZJpXUuaZ\"}"} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7a01cfdb-43ac-42e7-a351-0144f157d47d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ed5dd021-2302-4dff-bb76-e77560eda8d0","keyName":"e2e-rate-a-3d1c33","subscription":"e2e-rate-iso-a-3d1c33","tenant":"e2e-shared-a-5f06b1","userId":"ed5dd021-2302-4dff-bb76-e77560eda8d0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7a01cfdb-43ac-42e7-a351-0144f157d47d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\",\"requestedSubscription\":\"e2e-rate-iso-a-3d1c33\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7a01cfdb-43ac-42e7-a351-0144f157d47d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1c33","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"}} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7a01cfdb-43ac-42e7-a351-0144f157d47d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a01cfdb-43ac-42e7-a351-0144f157d47d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a01cfdb-43ac-42e7-a351-0144f157d47d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a01cfdb-43ac-42e7-a351-0144f157d47d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a01cfdb-43ac-42e7-a351-0144f157d47d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a01cfdb-43ac-42e7-a351-0144f157d47d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3d1c33"} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a01cfdb-43ac-42e7-a351-0144f157d47d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a01cfdb-43ac-42e7-a351-0144f157d47d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a01cfdb-43ac-42e7-a351-0144f157d47d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ed5dd021-2302-4dff-bb76-e77560eda8d0","keyName":"e2e-rate-a-3d1c33","selected_subscription":"e2e-rate-iso-a-3d1c33","selected_subscription_key":"ai-tenant-e2e-shared-a-5f06b1/e2e-rate-iso-a-3d1c33@ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1c33","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a01cfdb-43ac-42e7-a351-0144f157d47d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:47:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a01cfdb-43ac-42e7-a351-0144f157d47d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:47:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"344db956-d41f-405b-a6e5-dfc2fb0ff83a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:44568","PortSpecifier":{"PortValue":44568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"344db956-d41f-405b-a6e5-dfc2fb0ff83a","method":"POST","path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:47:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"344db956-d41f-405b-a6e5-dfc2fb0ff83a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:44568","PortSpecifier":{"PortValue":44568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832435,"nanos":543663309},"http":{"id":"344db956-d41f-405b-a6e5-dfc2fb0ff83a","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"344db956-d41f-405b-a6e5-dfc2fb0ff83a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RTQ9azvrHXNdROZg_boBDmA3ufhelD1EMTd6xItVovxa5IC2f3gxZJpXUuaZ"} {"level":"debug","ts":"2026-07-23T18:47:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"344db956-d41f-405b-a6e5-dfc2fb0ff83a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RTQ9azvrHXNdROZg_boBDmA3ufhelD1EMTd6xItVovxa5IC2f3gxZJpXUuaZ\"}"} {"level":"debug","ts":"2026-07-23T18:47:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"344db956-d41f-405b-a6e5-dfc2fb0ff83a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ed5dd021-2302-4dff-bb76-e77560eda8d0","keyName":"e2e-rate-a-3d1c33","subscription":"e2e-rate-iso-a-3d1c33","tenant":"e2e-shared-a-5f06b1","userId":"ed5dd021-2302-4dff-bb76-e77560eda8d0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:47:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"344db956-d41f-405b-a6e5-dfc2fb0ff83a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\",\"requestedSubscription\":\"e2e-rate-iso-a-3d1c33\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:47:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"344db956-d41f-405b-a6e5-dfc2fb0ff83a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1c33","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"}} {"level":"debug","ts":"2026-07-23T18:47:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"344db956-d41f-405b-a6e5-dfc2fb0ff83a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"344db956-d41f-405b-a6e5-dfc2fb0ff83a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"344db956-d41f-405b-a6e5-dfc2fb0ff83a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"344db956-d41f-405b-a6e5-dfc2fb0ff83a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"344db956-d41f-405b-a6e5-dfc2fb0ff83a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"344db956-d41f-405b-a6e5-dfc2fb0ff83a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:47:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"344db956-d41f-405b-a6e5-dfc2fb0ff83a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3d1c33"} {"level":"debug","ts":"2026-07-23T18:47:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"344db956-d41f-405b-a6e5-dfc2fb0ff83a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:47:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"344db956-d41f-405b-a6e5-dfc2fb0ff83a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ed5dd021-2302-4dff-bb76-e77560eda8d0","keyName":"e2e-rate-a-3d1c33","selected_subscription":"e2e-rate-iso-a-3d1c33","selected_subscription_key":"ai-tenant-e2e-shared-a-5f06b1/e2e-rate-iso-a-3d1c33@ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1c33","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:47:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"344db956-d41f-405b-a6e5-dfc2fb0ff83a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:47:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"344db956-d41f-405b-a6e5-dfc2fb0ff83a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:47:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0138bad9-9e8f-42d7-9554-ea56583accad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:44576","PortSpecifier":{"PortValue":44576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0138bad9-9e8f-42d7-9554-ea56583accad","method":"POST","path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:47:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0138bad9-9e8f-42d7-9554-ea56583accad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:44576","PortSpecifier":{"PortValue":44576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832436,"nanos":583086503},"http":{"id":"0138bad9-9e8f-42d7-9554-ea56583accad","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0138bad9-9e8f-42d7-9554-ea56583accad","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RTQ9azvrHXNdROZg_boBDmA3ufhelD1EMTd6xItVovxa5IC2f3gxZJpXUuaZ"} {"level":"debug","ts":"2026-07-23T18:47:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0138bad9-9e8f-42d7-9554-ea56583accad","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RTQ9azvrHXNdROZg_boBDmA3ufhelD1EMTd6xItVovxa5IC2f3gxZJpXUuaZ\"}"} {"level":"debug","ts":"2026-07-23T18:47:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0138bad9-9e8f-42d7-9554-ea56583accad","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ed5dd021-2302-4dff-bb76-e77560eda8d0","keyName":"e2e-rate-a-3d1c33","subscription":"e2e-rate-iso-a-3d1c33","tenant":"e2e-shared-a-5f06b1","userId":"ed5dd021-2302-4dff-bb76-e77560eda8d0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:47:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0138bad9-9e8f-42d7-9554-ea56583accad","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\",\"requestedSubscription\":\"e2e-rate-iso-a-3d1c33\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:47:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0138bad9-9e8f-42d7-9554-ea56583accad","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1c33","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"}} {"level":"debug","ts":"2026-07-23T18:47:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0138bad9-9e8f-42d7-9554-ea56583accad","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0138bad9-9e8f-42d7-9554-ea56583accad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0138bad9-9e8f-42d7-9554-ea56583accad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0138bad9-9e8f-42d7-9554-ea56583accad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0138bad9-9e8f-42d7-9554-ea56583accad","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0138bad9-9e8f-42d7-9554-ea56583accad","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3d1c33"} {"level":"debug","ts":"2026-07-23T18:47:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0138bad9-9e8f-42d7-9554-ea56583accad","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:47:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0138bad9-9e8f-42d7-9554-ea56583accad","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:47:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0138bad9-9e8f-42d7-9554-ea56583accad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ed5dd021-2302-4dff-bb76-e77560eda8d0","keyName":"e2e-rate-a-3d1c33","selected_subscription":"e2e-rate-iso-a-3d1c33","selected_subscription_key":"ai-tenant-e2e-shared-a-5f06b1/e2e-rate-iso-a-3d1c33@ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1c33","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:47:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0138bad9-9e8f-42d7-9554-ea56583accad","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:47:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0138bad9-9e8f-42d7-9554-ea56583accad","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:47:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f346eeb-b93c-4263-8462-80e4d5c31e49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:44592","PortSpecifier":{"PortValue":44592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f346eeb-b93c-4263-8462-80e4d5c31e49","method":"POST","path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:47:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f346eeb-b93c-4263-8462-80e4d5c31e49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:44592","PortSpecifier":{"PortValue":44592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832437,"nanos":622978526},"http":{"id":"3f346eeb-b93c-4263-8462-80e4d5c31e49","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f346eeb-b93c-4263-8462-80e4d5c31e49","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RTQ9azvrHXNdROZg_boBDmA3ufhelD1EMTd6xItVovxa5IC2f3gxZJpXUuaZ"} {"level":"debug","ts":"2026-07-23T18:47:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3f346eeb-b93c-4263-8462-80e4d5c31e49","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RTQ9azvrHXNdROZg_boBDmA3ufhelD1EMTd6xItVovxa5IC2f3gxZJpXUuaZ\"}"} {"level":"debug","ts":"2026-07-23T18:47:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3f346eeb-b93c-4263-8462-80e4d5c31e49","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ed5dd021-2302-4dff-bb76-e77560eda8d0","keyName":"e2e-rate-a-3d1c33","subscription":"e2e-rate-iso-a-3d1c33","tenant":"e2e-shared-a-5f06b1","userId":"ed5dd021-2302-4dff-bb76-e77560eda8d0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:47:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3f346eeb-b93c-4263-8462-80e4d5c31e49","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\",\"requestedSubscription\":\"e2e-rate-iso-a-3d1c33\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:47:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3f346eeb-b93c-4263-8462-80e4d5c31e49","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1c33","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"}} {"level":"debug","ts":"2026-07-23T18:47:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f346eeb-b93c-4263-8462-80e4d5c31e49","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f346eeb-b93c-4263-8462-80e4d5c31e49","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f346eeb-b93c-4263-8462-80e4d5c31e49","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f346eeb-b93c-4263-8462-80e4d5c31e49","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f346eeb-b93c-4263-8462-80e4d5c31e49","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f346eeb-b93c-4263-8462-80e4d5c31e49","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:47:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f346eeb-b93c-4263-8462-80e4d5c31e49","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3d1c33"} {"level":"debug","ts":"2026-07-23T18:47:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f346eeb-b93c-4263-8462-80e4d5c31e49","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:47:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f346eeb-b93c-4263-8462-80e4d5c31e49","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ed5dd021-2302-4dff-bb76-e77560eda8d0","keyName":"e2e-rate-a-3d1c33","selected_subscription":"e2e-rate-iso-a-3d1c33","selected_subscription_key":"ai-tenant-e2e-shared-a-5f06b1/e2e-rate-iso-a-3d1c33@ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1c33","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:47:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f346eeb-b93c-4263-8462-80e4d5c31e49","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:47:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f346eeb-b93c-4263-8462-80e4d5c31e49","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:47:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9121cb59-8448-424e-a612-37f2654a2edf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49194","PortSpecifier":{"PortValue":49194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9121cb59-8448-424e-a612-37f2654a2edf","method":"POST","path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:47:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9121cb59-8448-424e-a612-37f2654a2edf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49194","PortSpecifier":{"PortValue":49194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832438,"nanos":668082165},"http":{"id":"9121cb59-8448-424e-a612-37f2654a2edf","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9121cb59-8448-424e-a612-37f2654a2edf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RTQ9azvrHXNdROZg_boBDmA3ufhelD1EMTd6xItVovxa5IC2f3gxZJpXUuaZ"} {"level":"debug","ts":"2026-07-23T18:47:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9121cb59-8448-424e-a612-37f2654a2edf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RTQ9azvrHXNdROZg_boBDmA3ufhelD1EMTd6xItVovxa5IC2f3gxZJpXUuaZ\"}"} {"level":"debug","ts":"2026-07-23T18:47:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9121cb59-8448-424e-a612-37f2654a2edf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ed5dd021-2302-4dff-bb76-e77560eda8d0","keyName":"e2e-rate-a-3d1c33","subscription":"e2e-rate-iso-a-3d1c33","tenant":"e2e-shared-a-5f06b1","userId":"ed5dd021-2302-4dff-bb76-e77560eda8d0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:47:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9121cb59-8448-424e-a612-37f2654a2edf","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\",\"requestedSubscription\":\"e2e-rate-iso-a-3d1c33\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:47:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9121cb59-8448-424e-a612-37f2654a2edf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1c33","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"}} {"level":"debug","ts":"2026-07-23T18:47:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9121cb59-8448-424e-a612-37f2654a2edf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9121cb59-8448-424e-a612-37f2654a2edf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9121cb59-8448-424e-a612-37f2654a2edf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9121cb59-8448-424e-a612-37f2654a2edf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9121cb59-8448-424e-a612-37f2654a2edf","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9121cb59-8448-424e-a612-37f2654a2edf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:47:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9121cb59-8448-424e-a612-37f2654a2edf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:47:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9121cb59-8448-424e-a612-37f2654a2edf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3d1c33"} {"level":"debug","ts":"2026-07-23T18:47:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9121cb59-8448-424e-a612-37f2654a2edf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ed5dd021-2302-4dff-bb76-e77560eda8d0","keyName":"e2e-rate-a-3d1c33","selected_subscription":"e2e-rate-iso-a-3d1c33","selected_subscription_key":"ai-tenant-e2e-shared-a-5f06b1/e2e-rate-iso-a-3d1c33@ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1c33","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:47:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9121cb59-8448-424e-a612-37f2654a2edf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:47:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9121cb59-8448-424e-a612-37f2654a2edf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:47:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2dc50025-b8dd-488d-b2e8-e5dd6965f209","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49196","PortSpecifier":{"PortValue":49196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2dc50025-b8dd-488d-b2e8-e5dd6965f209","method":"POST","path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:47:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2dc50025-b8dd-488d-b2e8-e5dd6965f209","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49196","PortSpecifier":{"PortValue":49196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832439,"nanos":710304303},"http":{"id":"2dc50025-b8dd-488d-b2e8-e5dd6965f209","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2dc50025-b8dd-488d-b2e8-e5dd6965f209","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RTQ9azvrHXNdROZg_boBDmA3ufhelD1EMTd6xItVovxa5IC2f3gxZJpXUuaZ"} {"level":"debug","ts":"2026-07-23T18:47:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2dc50025-b8dd-488d-b2e8-e5dd6965f209","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RTQ9azvrHXNdROZg_boBDmA3ufhelD1EMTd6xItVovxa5IC2f3gxZJpXUuaZ\"}"} {"level":"debug","ts":"2026-07-23T18:47:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2dc50025-b8dd-488d-b2e8-e5dd6965f209","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ed5dd021-2302-4dff-bb76-e77560eda8d0","keyName":"e2e-rate-a-3d1c33","subscription":"e2e-rate-iso-a-3d1c33","tenant":"e2e-shared-a-5f06b1","userId":"ed5dd021-2302-4dff-bb76-e77560eda8d0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:47:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2dc50025-b8dd-488d-b2e8-e5dd6965f209","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\",\"requestedSubscription\":\"e2e-rate-iso-a-3d1c33\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:47:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2dc50025-b8dd-488d-b2e8-e5dd6965f209","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1c33","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"}} {"level":"debug","ts":"2026-07-23T18:47:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2dc50025-b8dd-488d-b2e8-e5dd6965f209","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dc50025-b8dd-488d-b2e8-e5dd6965f209","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dc50025-b8dd-488d-b2e8-e5dd6965f209","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dc50025-b8dd-488d-b2e8-e5dd6965f209","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dc50025-b8dd-488d-b2e8-e5dd6965f209","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dc50025-b8dd-488d-b2e8-e5dd6965f209","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3d1c33"} {"level":"debug","ts":"2026-07-23T18:47:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dc50025-b8dd-488d-b2e8-e5dd6965f209","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:47:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dc50025-b8dd-488d-b2e8-e5dd6965f209","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:47:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dc50025-b8dd-488d-b2e8-e5dd6965f209","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ed5dd021-2302-4dff-bb76-e77560eda8d0","keyName":"e2e-rate-a-3d1c33","selected_subscription":"e2e-rate-iso-a-3d1c33","selected_subscription_key":"ai-tenant-e2e-shared-a-5f06b1/e2e-rate-iso-a-3d1c33@ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1c33","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:47:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2dc50025-b8dd-488d-b2e8-e5dd6965f209","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:47:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2dc50025-b8dd-488d-b2e8-e5dd6965f209","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:47:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d8d5e9c-aa79-4675-a3dc-1a503f83e611","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49208","PortSpecifier":{"PortValue":49208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d8d5e9c-aa79-4675-a3dc-1a503f83e611","method":"POST","path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:47:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d8d5e9c-aa79-4675-a3dc-1a503f83e611","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49208","PortSpecifier":{"PortValue":49208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832440,"nanos":753297166},"http":{"id":"3d8d5e9c-aa79-4675-a3dc-1a503f83e611","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d8d5e9c-aa79-4675-a3dc-1a503f83e611","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RTQ9azvrHXNdROZg_boBDmA3ufhelD1EMTd6xItVovxa5IC2f3gxZJpXUuaZ"} {"level":"debug","ts":"2026-07-23T18:47:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3d8d5e9c-aa79-4675-a3dc-1a503f83e611","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RTQ9azvrHXNdROZg_boBDmA3ufhelD1EMTd6xItVovxa5IC2f3gxZJpXUuaZ\"}"} {"level":"debug","ts":"2026-07-23T18:47:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3d8d5e9c-aa79-4675-a3dc-1a503f83e611","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ed5dd021-2302-4dff-bb76-e77560eda8d0","keyName":"e2e-rate-a-3d1c33","subscription":"e2e-rate-iso-a-3d1c33","tenant":"e2e-shared-a-5f06b1","userId":"ed5dd021-2302-4dff-bb76-e77560eda8d0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:47:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3d8d5e9c-aa79-4675-a3dc-1a503f83e611","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\",\"requestedSubscription\":\"e2e-rate-iso-a-3d1c33\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:47:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3d8d5e9c-aa79-4675-a3dc-1a503f83e611","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1c33","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"}} {"level":"debug","ts":"2026-07-23T18:47:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d8d5e9c-aa79-4675-a3dc-1a503f83e611","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d8d5e9c-aa79-4675-a3dc-1a503f83e611","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d8d5e9c-aa79-4675-a3dc-1a503f83e611","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d8d5e9c-aa79-4675-a3dc-1a503f83e611","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d8d5e9c-aa79-4675-a3dc-1a503f83e611","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d8d5e9c-aa79-4675-a3dc-1a503f83e611","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3d1c33"} {"level":"debug","ts":"2026-07-23T18:47:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d8d5e9c-aa79-4675-a3dc-1a503f83e611","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:47:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d8d5e9c-aa79-4675-a3dc-1a503f83e611","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:47:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d8d5e9c-aa79-4675-a3dc-1a503f83e611","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ed5dd021-2302-4dff-bb76-e77560eda8d0","keyName":"e2e-rate-a-3d1c33","selected_subscription":"e2e-rate-iso-a-3d1c33","selected_subscription_key":"ai-tenant-e2e-shared-a-5f06b1/e2e-rate-iso-a-3d1c33@ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1c33","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:47:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d8d5e9c-aa79-4675-a3dc-1a503f83e611","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:47:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d8d5e9c-aa79-4675-a3dc-1a503f83e611","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:47:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8436e25b-c513-46fb-824b-f8ccd93d3264","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49218","PortSpecifier":{"PortValue":49218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8436e25b-c513-46fb-824b-f8ccd93d3264","method":"POST","path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:47:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8436e25b-c513-46fb-824b-f8ccd93d3264","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49218","PortSpecifier":{"PortValue":49218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832441,"nanos":790093855},"http":{"id":"8436e25b-c513-46fb-824b-f8ccd93d3264","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8436e25b-c513-46fb-824b-f8ccd93d3264","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RTQ9azvrHXNdROZg_boBDmA3ufhelD1EMTd6xItVovxa5IC2f3gxZJpXUuaZ"} {"level":"debug","ts":"2026-07-23T18:47:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8436e25b-c513-46fb-824b-f8ccd93d3264","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RTQ9azvrHXNdROZg_boBDmA3ufhelD1EMTd6xItVovxa5IC2f3gxZJpXUuaZ\"}"} {"level":"debug","ts":"2026-07-23T18:47:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8436e25b-c513-46fb-824b-f8ccd93d3264","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ed5dd021-2302-4dff-bb76-e77560eda8d0","keyName":"e2e-rate-a-3d1c33","subscription":"e2e-rate-iso-a-3d1c33","tenant":"e2e-shared-a-5f06b1","userId":"ed5dd021-2302-4dff-bb76-e77560eda8d0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:47:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8436e25b-c513-46fb-824b-f8ccd93d3264","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\",\"requestedSubscription\":\"e2e-rate-iso-a-3d1c33\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:47:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8436e25b-c513-46fb-824b-f8ccd93d3264","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1c33","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"}} {"level":"debug","ts":"2026-07-23T18:47:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8436e25b-c513-46fb-824b-f8ccd93d3264","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8436e25b-c513-46fb-824b-f8ccd93d3264","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8436e25b-c513-46fb-824b-f8ccd93d3264","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8436e25b-c513-46fb-824b-f8ccd93d3264","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8436e25b-c513-46fb-824b-f8ccd93d3264","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8436e25b-c513-46fb-824b-f8ccd93d3264","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:47:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8436e25b-c513-46fb-824b-f8ccd93d3264","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3d1c33"} {"level":"debug","ts":"2026-07-23T18:47:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8436e25b-c513-46fb-824b-f8ccd93d3264","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:47:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8436e25b-c513-46fb-824b-f8ccd93d3264","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ed5dd021-2302-4dff-bb76-e77560eda8d0","keyName":"e2e-rate-a-3d1c33","selected_subscription":"e2e-rate-iso-a-3d1c33","selected_subscription_key":"ai-tenant-e2e-shared-a-5f06b1/e2e-rate-iso-a-3d1c33@ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1c33","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:47:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8436e25b-c513-46fb-824b-f8ccd93d3264","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:47:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8436e25b-c513-46fb-824b-f8ccd93d3264","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49224","PortSpecifier":{"PortValue":49224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","method":"POST","path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49224","PortSpecifier":{"PortValue":49224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832442,"nanos":825927082},"http":{"id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RTQ9azvrHXNdROZg_boBDmA3ufhelD1EMTd6xItVovxa5IC2f3gxZJpXUuaZ"} {"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RTQ9azvrHXNdROZg_boBDmA3ufhelD1EMTd6xItVovxa5IC2f3gxZJpXUuaZ\"}"} {"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ed5dd021-2302-4dff-bb76-e77560eda8d0","keyName":"e2e-rate-a-3d1c33","subscription":"e2e-rate-iso-a-3d1c33","tenant":"e2e-shared-a-5f06b1","userId":"ed5dd021-2302-4dff-bb76-e77560eda8d0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\",\"requestedSubscription\":\"e2e-rate-iso-a-3d1c33\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1c33","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"}} {"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3d1c33"} {"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ed5dd021-2302-4dff-bb76-e77560eda8d0","keyName":"e2e-rate-a-3d1c33","selected_subscription":"e2e-rate-iso-a-3d1c33","selected_subscription_key":"ai-tenant-e2e-shared-a-5f06b1/e2e-rate-iso-a-3d1c33@ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1c33","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:47:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"} {"level":"info","ts":"2026-07-23T18:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/106b733a939aa14f12c0e5d87b0b5b160a2e16f458f241c1d817925f74c73e1d"} {"level":"info","ts":"2026-07-23T18:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"} {"level":"info","ts":"2026-07-23T18:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1"} {"level":"info","ts":"2026-07-23T18:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"} {"level":"info","ts":"2026-07-23T18:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa"} {"level":"info","ts":"2026-07-23T18:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b"} {"level":"info","ts":"2026-07-23T18:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1afbf90ef38eb2d9d497a4c5d9dd50e3966e40d838591b9735f7d15542ad63af"} {"level":"info","ts":"2026-07-23T18:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"} {"level":"info","ts":"2026-07-23T18:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"} {"level":"info","ts":"2026-07-23T18:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058"} {"level":"info","ts":"2026-07-23T18:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4"} {"level":"debug","ts":"2026-07-23T18:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"} {"level":"debug","ts":"2026-07-23T18:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T18:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"} {"level":"debug","ts":"2026-07-23T18:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4"} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4"} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa"} {"level":"error","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4"} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa"} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4"} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa"} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4"} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa"} {"level":"error","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"} {"level":"error","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b"} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b"} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b"} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058"} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058"} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058"} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"} {"level":"error","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"106b733a939aa14f12c0e5d87b0b5b160a2e16f458f241c1d817925f74c73e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/106b733a939aa14f12c0e5d87b0b5b160a2e16f458f241c1d817925f74c73e1d"} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"106b733a939aa14f12c0e5d87b0b5b160a2e16f458f241c1d817925f74c73e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/106b733a939aa14f12c0e5d87b0b5b160a2e16f458f241c1d817925f74c73e1d"} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"106b733a939aa14f12c0e5d87b0b5b160a2e16f458f241c1d817925f74c73e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["106b733a939aa14f12c0e5d87b0b5b160a2e16f458f241c1d817925f74c73e1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1"} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"106b733a939aa14f12c0e5d87b0b5b160a2e16f458f241c1d817925f74c73e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/106b733a939aa14f12c0e5d87b0b5b160a2e16f458f241c1d817925f74c73e1d"} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"106b733a939aa14f12c0e5d87b0b5b160a2e16f458f241c1d817925f74c73e1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1afbf90ef38eb2d9d497a4c5d9dd50e3966e40d838591b9735f7d15542ad63af"} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1afbf90ef38eb2d9d497a4c5d9dd50e3966e40d838591b9735f7d15542ad63af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1afbf90ef38eb2d9d497a4c5d9dd50e3966e40d838591b9735f7d15542ad63af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1"} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1afbf90ef38eb2d9d497a4c5d9dd50e3966e40d838591b9735f7d15542ad63af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1afbf90ef38eb2d9d497a4c5d9dd50e3966e40d838591b9735f7d15542ad63af"} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1afbf90ef38eb2d9d497a4c5d9dd50e3966e40d838591b9735f7d15542ad63af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"} {"level":"error","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc27a714-0e91-4bae-8726-1f92036b0ed9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41466","PortSpecifier":{"PortValue":41466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc27a714-0e91-4bae-8726-1f92036b0ed9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc27a714-0e91-4bae-8726-1f92036b0ed9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41466","PortSpecifier":{"PortValue":41466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832460,"nanos":148496177},"http":{"id":"cc27a714-0e91-4bae-8726-1f92036b0ed9","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cc27a714-0e91-4bae-8726-1f92036b0ed9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc27a714-0e91-4bae-8726-1f92036b0ed9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"]}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc27a714-0e91-4bae-8726-1f92036b0ed9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc27a714-0e91-4bae-8726-1f92036b0ed9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc27a714-0e91-4bae-8726-1f92036b0ed9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc27a714-0e91-4bae-8726-1f92036b0ed9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cc27a714-0e91-4bae-8726-1f92036b0ed9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc27a714-0e91-4bae-8726-1f92036b0ed9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc27a714-0e91-4bae-8726-1f92036b0ed9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc27a714-0e91-4bae-8726-1f92036b0ed9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc27a714-0e91-4bae-8726-1f92036b0ed9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76860613-de23-4cbd-97d6-ab1e8d703a25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:50752","PortSpecifier":{"PortValue":50752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"76860613-de23-4cbd-97d6-ab1e8d703a25","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76860613-de23-4cbd-97d6-ab1e8d703a25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:50752","PortSpecifier":{"PortValue":50752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832460,"nanos":191527079},"http":{"id":"76860613-de23-4cbd-97d6-ab1e8d703a25","method":"POST","headers":{":authority":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"76860613-de23-4cbd-97d6-ab1e8d703a25","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"76860613-de23-4cbd-97d6-ab1e8d703a25","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"]}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"76860613-de23-4cbd-97d6-ab1e8d703a25","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76860613-de23-4cbd-97d6-ab1e8d703a25","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76860613-de23-4cbd-97d6-ab1e8d703a25","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76860613-de23-4cbd-97d6-ab1e8d703a25","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ee985/rate-test-model-8ee985\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ee985/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"76860613-de23-4cbd-97d6-ab1e8d703a25","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76860613-de23-4cbd-97d6-ab1e8d703a25","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76860613-de23-4cbd-97d6-ab1e8d703a25","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76860613-de23-4cbd-97d6-ab1e8d703a25","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76860613-de23-4cbd-97d6-ab1e8d703a25","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41470","PortSpecifier":{"PortValue":41470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","method":"POST","path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41470","PortSpecifier":{"PortValue":41470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832460,"nanos":230261791},"http":{"id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL"} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL\"}"} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","subscription":"e2e-rate-iso-a-d16ab9","tenant":"e2e-shared-a-5f06b1","userId":"984e4f0a-81eb-4869-b961-425aa02592ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\",\"requestedSubscription\":\"e2e-rate-iso-a-d16ab9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d16ab9"} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","selected_subscription":"e2e-rate-iso-a-d16ab9","selected_subscription_key":"ai-tenant-e2e-shared-a-5f06b1/e2e-rate-iso-a-d16ab9@ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41478","PortSpecifier":{"PortValue":41478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","method":"POST","path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41478","PortSpecifier":{"PortValue":41478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832461,"nanos":269252083},"http":{"id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL"} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL\"}"} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","subscription":"e2e-rate-iso-a-d16ab9","tenant":"e2e-shared-a-5f06b1","userId":"984e4f0a-81eb-4869-b961-425aa02592ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\",\"requestedSubscription\":\"e2e-rate-iso-a-d16ab9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d16ab9"} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","selected_subscription":"e2e-rate-iso-a-d16ab9","selected_subscription_key":"ai-tenant-e2e-shared-a-5f06b1/e2e-rate-iso-a-d16ab9@ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41482","PortSpecifier":{"PortValue":41482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"685659ce-af1d-47fb-b428-b0dba5921d90","method":"POST","path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41482","PortSpecifier":{"PortValue":41482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832462,"nanos":311391794},"http":{"id":"685659ce-af1d-47fb-b428-b0dba5921d90","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL"} {"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL\"}"} {"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","subscription":"e2e-rate-iso-a-d16ab9","tenant":"e2e-shared-a-5f06b1","userId":"984e4f0a-81eb-4869-b961-425aa02592ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\",\"requestedSubscription\":\"e2e-rate-iso-a-d16ab9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"}} {"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d16ab9"} {"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","selected_subscription":"e2e-rate-iso-a-d16ab9","selected_subscription_key":"ai-tenant-e2e-shared-a-5f06b1/e2e-rate-iso-a-d16ab9@ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41496","PortSpecifier":{"PortValue":41496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f75a88b-613e-9f93-b671-7e466e1affd0","method":"POST","path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41496","PortSpecifier":{"PortValue":41496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832463,"nanos":348467167},"http":{"id":"2f75a88b-613e-9f93-b671-7e466e1affd0","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL"} {"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL\"}"} {"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","subscription":"e2e-rate-iso-a-d16ab9","tenant":"e2e-shared-a-5f06b1","userId":"984e4f0a-81eb-4869-b961-425aa02592ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\",\"requestedSubscription\":\"e2e-rate-iso-a-d16ab9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"}} {"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d16ab9"} {"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","selected_subscription":"e2e-rate-iso-a-d16ab9","selected_subscription_key":"ai-tenant-e2e-shared-a-5f06b1/e2e-rate-iso-a-d16ab9@ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41500","PortSpecifier":{"PortValue":41500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","method":"POST","path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41500","PortSpecifier":{"PortValue":41500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832464,"nanos":391741231},"http":{"id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL"} {"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL\"}"} {"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","subscription":"e2e-rate-iso-a-d16ab9","tenant":"e2e-shared-a-5f06b1","userId":"984e4f0a-81eb-4869-b961-425aa02592ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\",\"requestedSubscription\":\"e2e-rate-iso-a-d16ab9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"}} {"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d16ab9"} {"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","selected_subscription":"e2e-rate-iso-a-d16ab9","selected_subscription_key":"ai-tenant-e2e-shared-a-5f06b1/e2e-rate-iso-a-d16ab9@ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41514","PortSpecifier":{"PortValue":41514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43b3d43d-5f3e-48b4-93de-a180abea4829","method":"POST","path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41514","PortSpecifier":{"PortValue":41514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832465,"nanos":432203390},"http":{"id":"43b3d43d-5f3e-48b4-93de-a180abea4829","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL"} {"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL\"}"} {"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","subscription":"e2e-rate-iso-a-d16ab9","tenant":"e2e-shared-a-5f06b1","userId":"984e4f0a-81eb-4869-b961-425aa02592ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\",\"requestedSubscription\":\"e2e-rate-iso-a-d16ab9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"}} {"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d16ab9"} {"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","selected_subscription":"e2e-rate-iso-a-d16ab9","selected_subscription_key":"ai-tenant-e2e-shared-a-5f06b1/e2e-rate-iso-a-d16ab9@ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89a63f58-5bde-44af-ba75-19253898cb77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41528","PortSpecifier":{"PortValue":41528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"89a63f58-5bde-44af-ba75-19253898cb77","method":"POST","path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89a63f58-5bde-44af-ba75-19253898cb77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41528","PortSpecifier":{"PortValue":41528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832466,"nanos":473468206},"http":{"id":"89a63f58-5bde-44af-ba75-19253898cb77","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"89a63f58-5bde-44af-ba75-19253898cb77","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL"} {"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"89a63f58-5bde-44af-ba75-19253898cb77","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL\"}"} {"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"89a63f58-5bde-44af-ba75-19253898cb77","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","subscription":"e2e-rate-iso-a-d16ab9","tenant":"e2e-shared-a-5f06b1","userId":"984e4f0a-81eb-4869-b961-425aa02592ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"89a63f58-5bde-44af-ba75-19253898cb77","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\",\"requestedSubscription\":\"e2e-rate-iso-a-d16ab9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"89a63f58-5bde-44af-ba75-19253898cb77","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"}} {"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"89a63f58-5bde-44af-ba75-19253898cb77","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89a63f58-5bde-44af-ba75-19253898cb77","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89a63f58-5bde-44af-ba75-19253898cb77","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89a63f58-5bde-44af-ba75-19253898cb77","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89a63f58-5bde-44af-ba75-19253898cb77","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89a63f58-5bde-44af-ba75-19253898cb77","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89a63f58-5bde-44af-ba75-19253898cb77","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d16ab9"} {"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89a63f58-5bde-44af-ba75-19253898cb77","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89a63f58-5bde-44af-ba75-19253898cb77","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","selected_subscription":"e2e-rate-iso-a-d16ab9","selected_subscription_key":"ai-tenant-e2e-shared-a-5f06b1/e2e-rate-iso-a-d16ab9@ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89a63f58-5bde-44af-ba75-19253898cb77","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89a63f58-5bde-44af-ba75-19253898cb77","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41540","PortSpecifier":{"PortValue":41540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","method":"POST","path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41540","PortSpecifier":{"PortValue":41540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832467,"nanos":509864404},"http":{"id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL"} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL\"}"} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","subscription":"e2e-rate-iso-a-d16ab9","tenant":"e2e-shared-a-5f06b1","userId":"984e4f0a-81eb-4869-b961-425aa02592ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\",\"requestedSubscription\":\"e2e-rate-iso-a-d16ab9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"}} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d16ab9"} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","selected_subscription":"e2e-rate-iso-a-d16ab9","selected_subscription_key":"ai-tenant-e2e-shared-a-5f06b1/e2e-rate-iso-a-d16ab9@ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53986","PortSpecifier":{"PortValue":53986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","method":"POST","path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53986","PortSpecifier":{"PortValue":53986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832468,"nanos":549064232},"http":{"id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL"} {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL\"}"} {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","subscription":"e2e-rate-iso-a-d16ab9","tenant":"e2e-shared-a-5f06b1","userId":"984e4f0a-81eb-4869-b961-425aa02592ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\",\"requestedSubscription\":\"e2e-rate-iso-a-d16ab9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"}} {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d16ab9"} {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","selected_subscription":"e2e-rate-iso-a-d16ab9","selected_subscription_key":"ai-tenant-e2e-shared-a-5f06b1/e2e-rate-iso-a-d16ab9@ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:45342","PortSpecifier":{"PortValue":45342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","method":"POST","path":"/ai-tenant-e2e-shared-b-8ee985/rate-test-model-8ee985/v1/completions","host":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:45342","PortSpecifier":{"PortValue":45342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832468,"nanos":586653284},"http":{"id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","method":"POST","headers":{":authority":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-8ee985/rate-test-model-8ee985/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LGp2xQHvoLK6C1bu_mK6TTml4EHrDbOiYf7xUGThUCLVUQJQ1B0S8kbSnV5v"} {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-8ee985.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LGp2xQHvoLK6C1bu_mK6TTml4EHrDbOiYf7xUGThUCLVUQJQ1B0S8kbSnV5v\"}"} {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8ee985.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5f6750df-fb52-42c0-b65e-3d72352e3437","keyName":"e2e-rate-b-d16ab9","subscription":"e2e-rate-iso-b-d16ab9","tenant":"e2e-shared-b-8ee985","userId":"5f6750df-fb52-42c0-b65e-3d72352e3437","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-8ee985.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-8ee985/rate-test-model-8ee985\",\"requestedSubscription\":\"e2e-rate-iso-b-d16ab9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8ee985.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8ee985","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d16ab9","namespace":"ai-tenant-e2e-shared-b-8ee985","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-8ee985/rate-test-model-8ee985"}} {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ee985/rate-test-model-8ee985\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ee985/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-d16ab9"} {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5f6750df-fb52-42c0-b65e-3d72352e3437","keyName":"e2e-rate-b-d16ab9","selected_subscription":"e2e-rate-iso-b-d16ab9","selected_subscription_key":"ai-tenant-e2e-shared-b-8ee985/e2e-rate-iso-b-d16ab9@ai-tenant-e2e-shared-b-8ee985/rate-test-model-8ee985","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8ee985","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d16ab9","namespace":"ai-tenant-e2e-shared-b-8ee985","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-8ee985/rate-test-model-8ee985"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1afbf90ef38eb2d9d497a4c5d9dd50e3966e40d838591b9735f7d15542ad63af"} {"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa"} {"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"} {"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8517b734c65e88cd33ed731812dec0d9dd953522f930d78e7c066e1a7b60761"} {"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"} {"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/106b733a939aa14f12c0e5d87b0b5b160a2e16f458f241c1d817925f74c73e1d"} {"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b"} {"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d"} {"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"} {"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"} {"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0db0580c6c7b8860688fee14a48af8ec13b249f95f9c1b6e598fae87eacb640"} {"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f"} {"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b"} {"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb6da33df27fcad50e2e369ca9a410cd612648f4c9c36f435d72b7ced9df22a1"} {"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d53649ceba88dd296f673a633156c03084542dc7caf46884735407941dd4a13f"} {"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f"} {"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3378bbcbbab0d9e952daa562daaf6b6b9cce7ebf8057aad042b3a839ebc9125c"} {"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058"} {"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1"} {"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"} {"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6"} {"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34a55677f61f25defb2de0cb8e1f3e90d4c981f2ec8deb66d6c4fea066adfe59"} {"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"} {"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4"}