--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-16T21:14:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"571eef34-0d7b-4fb7-b450-ab910ec9dc58","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-69d8e7/auth-test-model-69d8e7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-69d8e7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:14:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"571eef34-0d7b-4fb7-b450-ab910ec9dc58","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T21:14:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"571eef34-0d7b-4fb7-b450-ab910ec9dc58","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T21:14:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"571eef34-0d7b-4fb7-b450-ab910ec9dc58","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T21:14:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"571eef34-0d7b-4fb7-b450-ab910ec9dc58","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:14:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"571eef34-0d7b-4fb7-b450-ab910ec9dc58","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:14:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec688f9f-9156-4d1e-8cf7-db5dbf8b92b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45298","PortSpecifier":{"PortValue":45298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec688f9f-9156-4d1e-8cf7-db5dbf8b92b7","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:14:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec688f9f-9156-4d1e-8cf7-db5dbf8b92b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45298","PortSpecifier":{"PortValue":45298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236455,"nanos":28360765},"http":{"id":"ec688f9f-9156-4d1e-8cf7-db5dbf8b92b7","method":"GET","headers":{":authority":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:14:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec688f9f-9156-4d1e-8cf7-db5dbf8b92b7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-saeV5Ew6wJq5QMjs_vi4Rt5T6z9U5Ihc3M8c0I4lwd5vgGipm6Q0CNISj6rX"} {"level":"debug","ts":"2026-07-16T21:14:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ec688f9f-9156-4d1e-8cf7-db5dbf8b92b7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-saeV5Ew6wJq5QMjs_vi4Rt5T6z9U5Ihc3M8c0I4lwd5vgGipm6Q0CNISj6rX\"}"} {"level":"debug","ts":"2026-07-16T21:14:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ec688f9f-9156-4d1e-8cf7-db5dbf8b92b7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dbfe4dd5-9f4f-460f-954e-249f12681fc7","keyName":"e2e-auth-iso-a-4db770","subscription":"e2e-auth-iso-e3aa6b","tenant":"e2e-shared-a-09402f","userId":"dbfe4dd5-9f4f-460f-954e-249f12681fc7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T21:14:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec688f9f-9156-4d1e-8cf7-db5dbf8b92b7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:14:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec688f9f-9156-4d1e-8cf7-db5dbf8b92b7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:14:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec688f9f-9156-4d1e-8cf7-db5dbf8b92b7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:14:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec688f9f-9156-4d1e-8cf7-db5dbf8b92b7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-09402f/auth-test-model-09402f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-09402f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:14:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec688f9f-9156-4d1e-8cf7-db5dbf8b92b7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T21:14:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec688f9f-9156-4d1e-8cf7-db5dbf8b92b7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-e3aa6b"} {"level":"debug","ts":"2026-07-16T21:14:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ec688f9f-9156-4d1e-8cf7-db5dbf8b92b7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T21:14:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec688f9f-9156-4d1e-8cf7-db5dbf8b92b7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T21:14:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec688f9f-9156-4d1e-8cf7-db5dbf8b92b7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:14:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec688f9f-9156-4d1e-8cf7-db5dbf8b92b7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"} {"level":"info","ts":"2026-07-16T21:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"} {"level":"info","ts":"2026-07-16T21:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"} {"level":"info","ts":"2026-07-16T21:14:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"} {"level":"info","ts":"2026-07-16T21:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147"} {"level":"info","ts":"2026-07-16T21:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"} {"level":"info","ts":"2026-07-16T21:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"} {"level":"info","ts":"2026-07-16T21:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c"} {"level":"info","ts":"2026-07-16T21:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"info","ts":"2026-07-16T21:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87"} {"level":"info","ts":"2026-07-16T21:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e"} {"level":"info","ts":"2026-07-16T21:14:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"debug","ts":"2026-07-16T21:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"} {"level":"debug","ts":"2026-07-16T21:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"} {"level":"debug","ts":"2026-07-16T21:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"} {"level":"debug","ts":"2026-07-16T21:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"} {"level":"debug","ts":"2026-07-16T21:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"} {"level":"debug","ts":"2026-07-16T21:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c"} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c"} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c"} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"} {"level":"error","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87"} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87"} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87"} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"} {"level":"error","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147"} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147"} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147"} {"level":"info","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"} {"level":"info","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147"} {"level":"debug","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e"} {"level":"debug","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"} {"level":"debug","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147"} {"level":"info","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"} {"level":"debug","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e"} {"level":"info","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"} {"level":"debug","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"} {"level":"debug","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"} {"level":"debug","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"} {"level":"debug","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"} {"level":"info","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bc17f2f-0ee4-4caf-a0a4-dbbf1adcb17d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51552","PortSpecifier":{"PortValue":51552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0bc17f2f-0ee4-4caf-a0a4-dbbf1adcb17d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bc17f2f-0ee4-4caf-a0a4-dbbf1adcb17d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51552","PortSpecifier":{"PortValue":51552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236474,"nanos":417959173},"http":{"id":"0bc17f2f-0ee4-4caf-a0a4-dbbf1adcb17d","method":"POST","headers":{":authority":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0bc17f2f-0ee4-4caf-a0a4-dbbf1adcb17d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0bc17f2f-0ee4-4caf-a0a4-dbbf1adcb17d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"86243fad-d46a-4074-8226-2625feaf915f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"]}} {"level":"debug","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0bc17f2f-0ee4-4caf-a0a4-dbbf1adcb17d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"86243fad-d46a-4074-8226-2625feaf915f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bc17f2f-0ee4-4caf-a0a4-dbbf1adcb17d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bc17f2f-0ee4-4caf-a0a4-dbbf1adcb17d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bc17f2f-0ee4-4caf-a0a4-dbbf1adcb17d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-09402f/auth-test-model-09402f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-09402f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0bc17f2f-0ee4-4caf-a0a4-dbbf1adcb17d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bc17f2f-0ee4-4caf-a0a4-dbbf1adcb17d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bc17f2f-0ee4-4caf-a0a4-dbbf1adcb17d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bc17f2f-0ee4-4caf-a0a4-dbbf1adcb17d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bc17f2f-0ee4-4caf-a0a4-dbbf1adcb17d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"582ef2f3-9f01-431f-a86f-262ec3f044ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52416","PortSpecifier":{"PortValue":52416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"582ef2f3-9f01-431f-a86f-262ec3f044ea","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"582ef2f3-9f01-431f-a86f-262ec3f044ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52416","PortSpecifier":{"PortValue":52416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236474,"nanos":476312632},"http":{"id":"582ef2f3-9f01-431f-a86f-262ec3f044ea","method":"POST","headers":{":authority":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"582ef2f3-9f01-431f-a86f-262ec3f044ea","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"582ef2f3-9f01-431f-a86f-262ec3f044ea","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"86243fad-d46a-4074-8226-2625feaf915f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"]}} {"level":"debug","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"582ef2f3-9f01-431f-a86f-262ec3f044ea","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"86243fad-d46a-4074-8226-2625feaf915f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"582ef2f3-9f01-431f-a86f-262ec3f044ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"582ef2f3-9f01-431f-a86f-262ec3f044ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"582ef2f3-9f01-431f-a86f-262ec3f044ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-69d8e7/auth-test-model-69d8e7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-69d8e7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"582ef2f3-9f01-431f-a86f-262ec3f044ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"582ef2f3-9f01-431f-a86f-262ec3f044ea","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"582ef2f3-9f01-431f-a86f-262ec3f044ea","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"582ef2f3-9f01-431f-a86f-262ec3f044ea","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"582ef2f3-9f01-431f-a86f-262ec3f044ea","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8b4a655-8087-481e-9198-9c687d09347a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52432","PortSpecifier":{"PortValue":52432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8b4a655-8087-481e-9198-9c687d09347a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8b4a655-8087-481e-9198-9c687d09347a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52432","PortSpecifier":{"PortValue":52432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236474,"nanos":522123371},"http":{"id":"a8b4a655-8087-481e-9198-9c687d09347a","method":"GET","headers":{":authority":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8b4a655-8087-481e-9198-9c687d09347a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1NzCUkbug2lWufCSJ_8vjZOLoT8iE3GMhok83TsrmllzggGYfWpUiXwBI85e4"} {"level":"debug","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a8b4a655-8087-481e-9198-9c687d09347a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-69d8e7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1NzCUkbug2lWufCSJ_8vjZOLoT8iE3GMhok83TsrmllzggGYfWpUiXwBI85e4\"}"} {"level":"debug","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a8b4a655-8087-481e-9198-9c687d09347a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-69d8e7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8b4a655-8087-481e-9198-9c687d09347a","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8b4a655-8087-481e-9198-9c687d09347a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"a8b4a655-8087-481e-9198-9c687d09347a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8b4a655-8087-481e-9198-9c687d09347a","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-16T21:14:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8b4a655-8087-481e-9198-9c687d09347a","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-16T21:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"} {"level":"info","ts":"2026-07-16T21:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87"} {"level":"info","ts":"2026-07-16T21:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"} {"level":"info","ts":"2026-07-16T21:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"info","ts":"2026-07-16T21:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"} {"level":"info","ts":"2026-07-16T21:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147"} {"level":"info","ts":"2026-07-16T21:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"} {"level":"info","ts":"2026-07-16T21:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c"} {"level":"info","ts":"2026-07-16T21:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"} {"level":"info","ts":"2026-07-16T21:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"} {"level":"info","ts":"2026-07-16T21:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"info","ts":"2026-07-16T21:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e"} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"} {"level":"error","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c"} {"level":"error","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c"} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87"} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87"} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c"} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147"} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147"} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e"} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:14:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"} {"level":"debug","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147"} {"level":"info","ts":"2026-07-16T21:14:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e"} {"level":"info","ts":"2026-07-16T21:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec972c73-ce0c-44cc-bf79-ccaf1c152d94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38480","PortSpecifier":{"PortValue":38480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec972c73-ce0c-44cc-bf79-ccaf1c152d94","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec972c73-ce0c-44cc-bf79-ccaf1c152d94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38480","PortSpecifier":{"PortValue":38480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236491,"nanos":919379715},"http":{"id":"ec972c73-ce0c-44cc-bf79-ccaf1c152d94","method":"POST","headers":{":authority":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:14:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ec972c73-ce0c-44cc-bf79-ccaf1c152d94","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T21:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec972c73-ce0c-44cc-bf79-ccaf1c152d94","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"86243fad-d46a-4074-8226-2625feaf915f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"]}} {"level":"debug","ts":"2026-07-16T21:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec972c73-ce0c-44cc-bf79-ccaf1c152d94","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"86243fad-d46a-4074-8226-2625feaf915f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec972c73-ce0c-44cc-bf79-ccaf1c152d94","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec972c73-ce0c-44cc-bf79-ccaf1c152d94","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec972c73-ce0c-44cc-bf79-ccaf1c152d94","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-09402f/auth-test-model-09402f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-09402f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ec972c73-ce0c-44cc-bf79-ccaf1c152d94","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T21:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec972c73-ce0c-44cc-bf79-ccaf1c152d94","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T21:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec972c73-ce0c-44cc-bf79-ccaf1c152d94","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T21:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec972c73-ce0c-44cc-bf79-ccaf1c152d94","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec972c73-ce0c-44cc-bf79-ccaf1c152d94","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae27d459-15a1-4af1-adf5-af05777ac367","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45124","PortSpecifier":{"PortValue":45124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae27d459-15a1-4af1-adf5-af05777ac367","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae27d459-15a1-4af1-adf5-af05777ac367","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45124","PortSpecifier":{"PortValue":45124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236491,"nanos":956270438},"http":{"id":"ae27d459-15a1-4af1-adf5-af05777ac367","method":"POST","headers":{":authority":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:14:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ae27d459-15a1-4af1-adf5-af05777ac367","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T21:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae27d459-15a1-4af1-adf5-af05777ac367","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"86243fad-d46a-4074-8226-2625feaf915f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"]}} {"level":"debug","ts":"2026-07-16T21:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae27d459-15a1-4af1-adf5-af05777ac367","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"86243fad-d46a-4074-8226-2625feaf915f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae27d459-15a1-4af1-adf5-af05777ac367","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae27d459-15a1-4af1-adf5-af05777ac367","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae27d459-15a1-4af1-adf5-af05777ac367","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-69d8e7/auth-test-model-69d8e7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-69d8e7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ae27d459-15a1-4af1-adf5-af05777ac367","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T21:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae27d459-15a1-4af1-adf5-af05777ac367","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T21:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae27d459-15a1-4af1-adf5-af05777ac367","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T21:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae27d459-15a1-4af1-adf5-af05777ac367","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae27d459-15a1-4af1-adf5-af05777ac367","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:14:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f730ff81-e432-4e19-bbcb-0028faceca58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38486","PortSpecifier":{"PortValue":38486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f730ff81-e432-4e19-bbcb-0028faceca58","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:14:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f730ff81-e432-4e19-bbcb-0028faceca58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38486","PortSpecifier":{"PortValue":38486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236492,"nanos":746538},"http":{"id":"f730ff81-e432-4e19-bbcb-0028faceca58","method":"POST","headers":{":authority":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:14:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f730ff81-e432-4e19-bbcb-0028faceca58","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T21:14:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f730ff81-e432-4e19-bbcb-0028faceca58","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"86243fad-d46a-4074-8226-2625feaf915f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"]}} {"level":"debug","ts":"2026-07-16T21:14:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f730ff81-e432-4e19-bbcb-0028faceca58","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"86243fad-d46a-4074-8226-2625feaf915f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:14:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f730ff81-e432-4e19-bbcb-0028faceca58","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:14:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f730ff81-e432-4e19-bbcb-0028faceca58","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:14:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f730ff81-e432-4e19-bbcb-0028faceca58","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-09402f/auth-test-model-09402f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-09402f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:14:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f730ff81-e432-4e19-bbcb-0028faceca58","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T21:14:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f730ff81-e432-4e19-bbcb-0028faceca58","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T21:14:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f730ff81-e432-4e19-bbcb-0028faceca58","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T21:14:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f730ff81-e432-4e19-bbcb-0028faceca58","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:14:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f730ff81-e432-4e19-bbcb-0028faceca58","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:14:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4562c59b-06ed-4058-a820-f469ac4fb9c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45126","PortSpecifier":{"PortValue":45126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4562c59b-06ed-4058-a820-f469ac4fb9c9","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:14:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4562c59b-06ed-4058-a820-f469ac4fb9c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45126","PortSpecifier":{"PortValue":45126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236492,"nanos":49936939},"http":{"id":"4562c59b-06ed-4058-a820-f469ac4fb9c9","method":"POST","headers":{":authority":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:14:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4562c59b-06ed-4058-a820-f469ac4fb9c9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T21:14:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4562c59b-06ed-4058-a820-f469ac4fb9c9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"86243fad-d46a-4074-8226-2625feaf915f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"]}} {"level":"debug","ts":"2026-07-16T21:14:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4562c59b-06ed-4058-a820-f469ac4fb9c9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"86243fad-d46a-4074-8226-2625feaf915f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:14:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4562c59b-06ed-4058-a820-f469ac4fb9c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:14:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4562c59b-06ed-4058-a820-f469ac4fb9c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:14:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4562c59b-06ed-4058-a820-f469ac4fb9c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-69d8e7/auth-test-model-69d8e7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-69d8e7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:14:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4562c59b-06ed-4058-a820-f469ac4fb9c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T21:14:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4562c59b-06ed-4058-a820-f469ac4fb9c9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T21:14:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4562c59b-06ed-4058-a820-f469ac4fb9c9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T21:14:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4562c59b-06ed-4058-a820-f469ac4fb9c9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:14:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4562c59b-06ed-4058-a820-f469ac4fb9c9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c"} {"level":"info","ts":"2026-07-16T21:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"} {"level":"info","ts":"2026-07-16T21:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e"} {"level":"info","ts":"2026-07-16T21:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147"} {"level":"info","ts":"2026-07-16T21:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"info","ts":"2026-07-16T21:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87"} {"level":"info","ts":"2026-07-16T21:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"} {"level":"info","ts":"2026-07-16T21:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"} {"level":"info","ts":"2026-07-16T21:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"info","ts":"2026-07-16T21:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"} {"level":"info","ts":"2026-07-16T21:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"} {"level":"info","ts":"2026-07-16T21:14:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"} {"level":"debug","ts":"2026-07-16T21:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"} {"level":"debug","ts":"2026-07-16T21:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"} {"level":"debug","ts":"2026-07-16T21:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c"} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c"} {"level":"error","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c"} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c"} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147"} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147"} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147"} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87"} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87"} {"level":"error","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87"} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e"} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e"} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"info","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e"} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e"} {"level":"error","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"error","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"error","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"} {"level":"info","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"723b58c0-f1c2-435c-ac8c-85c678985c8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54674","PortSpecifier":{"PortValue":54674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"723b58c0-f1c2-435c-ac8c-85c678985c8f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"723b58c0-f1c2-435c-ac8c-85c678985c8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54674","PortSpecifier":{"PortValue":54674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236509,"nanos":296903885},"http":{"id":"723b58c0-f1c2-435c-ac8c-85c678985c8f","method":"POST","headers":{":authority":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"723b58c0-f1c2-435c-ac8c-85c678985c8f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"723b58c0-f1c2-435c-ac8c-85c678985c8f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"86243fad-d46a-4074-8226-2625feaf915f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"]}} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"723b58c0-f1c2-435c-ac8c-85c678985c8f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"86243fad-d46a-4074-8226-2625feaf915f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"723b58c0-f1c2-435c-ac8c-85c678985c8f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"723b58c0-f1c2-435c-ac8c-85c678985c8f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"723b58c0-f1c2-435c-ac8c-85c678985c8f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-09402f/auth-test-model-09402f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-09402f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"723b58c0-f1c2-435c-ac8c-85c678985c8f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"723b58c0-f1c2-435c-ac8c-85c678985c8f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"723b58c0-f1c2-435c-ac8c-85c678985c8f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"723b58c0-f1c2-435c-ac8c-85c678985c8f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"723b58c0-f1c2-435c-ac8c-85c678985c8f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85641b91-af30-4d78-be11-18d53124dd7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39548","PortSpecifier":{"PortValue":39548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"85641b91-af30-4d78-be11-18d53124dd7a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85641b91-af30-4d78-be11-18d53124dd7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39548","PortSpecifier":{"PortValue":39548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236509,"nanos":337896909},"http":{"id":"85641b91-af30-4d78-be11-18d53124dd7a","method":"POST","headers":{":authority":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"85641b91-af30-4d78-be11-18d53124dd7a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"85641b91-af30-4d78-be11-18d53124dd7a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"86243fad-d46a-4074-8226-2625feaf915f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"]}} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"85641b91-af30-4d78-be11-18d53124dd7a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"86243fad-d46a-4074-8226-2625feaf915f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85641b91-af30-4d78-be11-18d53124dd7a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85641b91-af30-4d78-be11-18d53124dd7a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-69d8e7/auth-test-model-69d8e7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-69d8e7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85641b91-af30-4d78-be11-18d53124dd7a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"85641b91-af30-4d78-be11-18d53124dd7a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85641b91-af30-4d78-be11-18d53124dd7a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85641b91-af30-4d78-be11-18d53124dd7a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85641b91-af30-4d78-be11-18d53124dd7a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85641b91-af30-4d78-be11-18d53124dd7a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7c596df-e5fb-4c38-adeb-b602db7f6891","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39558","PortSpecifier":{"PortValue":39558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c7c596df-e5fb-4c38-adeb-b602db7f6891","method":"GET","path":"/maas-api/v1/api-keys/3a6c677a-436d-4cd6-bd74-7917a3bb7973","host":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7c596df-e5fb-4c38-adeb-b602db7f6891","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39558","PortSpecifier":{"PortValue":39558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236509,"nanos":376701046},"http":{"id":"c7c596df-e5fb-4c38-adeb-b602db7f6891","method":"GET","headers":{":authority":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3a6c677a-436d-4cd6-bd74-7917a3bb7973",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c7c596df-e5fb-4c38-adeb-b602db7f6891","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c7c596df-e5fb-4c38-adeb-b602db7f6891","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"86243fad-d46a-4074-8226-2625feaf915f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"]}} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c7c596df-e5fb-4c38-adeb-b602db7f6891","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"86243fad-d46a-4074-8226-2625feaf915f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3a6c677a-436d-4cd6-bd74-7917a3bb7973",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7c596df-e5fb-4c38-adeb-b602db7f6891","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7c596df-e5fb-4c38-adeb-b602db7f6891","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7c596df-e5fb-4c38-adeb-b602db7f6891","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-69d8e7/auth-test-model-69d8e7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-69d8e7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c7c596df-e5fb-4c38-adeb-b602db7f6891","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7c596df-e5fb-4c38-adeb-b602db7f6891","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7c596df-e5fb-4c38-adeb-b602db7f6891","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7c596df-e5fb-4c38-adeb-b602db7f6891","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7c596df-e5fb-4c38-adeb-b602db7f6891","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afd37abe-480b-402f-a1e1-f822d5521b01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54684","PortSpecifier":{"PortValue":54684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"afd37abe-480b-402f-a1e1-f822d5521b01","method":"GET","path":"/maas-api/v1/api-keys/3a6c677a-436d-4cd6-bd74-7917a3bb7973","host":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afd37abe-480b-402f-a1e1-f822d5521b01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54684","PortSpecifier":{"PortValue":54684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236509,"nanos":411483958},"http":{"id":"afd37abe-480b-402f-a1e1-f822d5521b01","method":"GET","headers":{":authority":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3a6c677a-436d-4cd6-bd74-7917a3bb7973",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"afd37abe-480b-402f-a1e1-f822d5521b01","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"afd37abe-480b-402f-a1e1-f822d5521b01","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"86243fad-d46a-4074-8226-2625feaf915f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"]}} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"afd37abe-480b-402f-a1e1-f822d5521b01","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"86243fad-d46a-4074-8226-2625feaf915f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3a6c677a-436d-4cd6-bd74-7917a3bb7973",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afd37abe-480b-402f-a1e1-f822d5521b01","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afd37abe-480b-402f-a1e1-f822d5521b01","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afd37abe-480b-402f-a1e1-f822d5521b01","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-09402f/auth-test-model-09402f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-09402f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"afd37abe-480b-402f-a1e1-f822d5521b01","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afd37abe-480b-402f-a1e1-f822d5521b01","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afd37abe-480b-402f-a1e1-f822d5521b01","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afd37abe-480b-402f-a1e1-f822d5521b01","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:15:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afd37abe-480b-402f-a1e1-f822d5521b01","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"info","ts":"2026-07-16T21:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"} {"level":"info","ts":"2026-07-16T21:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"} {"level":"info","ts":"2026-07-16T21:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147"} {"level":"info","ts":"2026-07-16T21:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"} {"level":"info","ts":"2026-07-16T21:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"} {"level":"info","ts":"2026-07-16T21:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e"} {"level":"info","ts":"2026-07-16T21:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c"} {"level":"info","ts":"2026-07-16T21:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"} {"level":"info","ts":"2026-07-16T21:15:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87"} {"level":"info","ts":"2026-07-16T21:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"} {"level":"info","ts":"2026-07-16T21:15:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"debug","ts":"2026-07-16T21:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87"} {"level":"debug","ts":"2026-07-16T21:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87"} {"level":"debug","ts":"2026-07-16T21:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87"} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147"} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147"} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147"} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c"} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c"} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c"} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c"} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e"} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"} {"level":"error","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T21:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e"} {"level":"debug","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"} {"level":"debug","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"} {"level":"debug","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"} {"level":"debug","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"} {"level":"debug","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"} {"level":"debug","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"} {"level":"debug","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:15:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"} {"level":"info","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"324dae50-5402-40b8-8dcd-8769e7f83285","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47958","PortSpecifier":{"PortValue":47958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"324dae50-5402-40b8-8dcd-8769e7f83285","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"324dae50-5402-40b8-8dcd-8769e7f83285","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47958","PortSpecifier":{"PortValue":47958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236524,"nanos":529350853},"http":{"id":"324dae50-5402-40b8-8dcd-8769e7f83285","method":"POST","headers":{":authority":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"324dae50-5402-40b8-8dcd-8769e7f83285","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"324dae50-5402-40b8-8dcd-8769e7f83285","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"86243fad-d46a-4074-8226-2625feaf915f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"]}} {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"324dae50-5402-40b8-8dcd-8769e7f83285","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"86243fad-d46a-4074-8226-2625feaf915f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"324dae50-5402-40b8-8dcd-8769e7f83285","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"324dae50-5402-40b8-8dcd-8769e7f83285","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"324dae50-5402-40b8-8dcd-8769e7f83285","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-09402f/auth-test-model-09402f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-09402f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"324dae50-5402-40b8-8dcd-8769e7f83285","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"324dae50-5402-40b8-8dcd-8769e7f83285","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"324dae50-5402-40b8-8dcd-8769e7f83285","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"324dae50-5402-40b8-8dcd-8769e7f83285","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"324dae50-5402-40b8-8dcd-8769e7f83285","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99397eb3-79bd-4917-abb4-7abc174d9c7f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36272","PortSpecifier":{"PortValue":36272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"99397eb3-79bd-4917-abb4-7abc174d9c7f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99397eb3-79bd-4917-abb4-7abc174d9c7f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36272","PortSpecifier":{"PortValue":36272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236524,"nanos":569273824},"http":{"id":"99397eb3-79bd-4917-abb4-7abc174d9c7f","method":"POST","headers":{":authority":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"99397eb3-79bd-4917-abb4-7abc174d9c7f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"99397eb3-79bd-4917-abb4-7abc174d9c7f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"86243fad-d46a-4074-8226-2625feaf915f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"]}} {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"99397eb3-79bd-4917-abb4-7abc174d9c7f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"86243fad-d46a-4074-8226-2625feaf915f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99397eb3-79bd-4917-abb4-7abc174d9c7f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99397eb3-79bd-4917-abb4-7abc174d9c7f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99397eb3-79bd-4917-abb4-7abc174d9c7f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-69d8e7/auth-test-model-69d8e7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-69d8e7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"99397eb3-79bd-4917-abb4-7abc174d9c7f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99397eb3-79bd-4917-abb4-7abc174d9c7f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99397eb3-79bd-4917-abb4-7abc174d9c7f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99397eb3-79bd-4917-abb4-7abc174d9c7f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99397eb3-79bd-4917-abb4-7abc174d9c7f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59e2e4fd-9483-47e3-bd9b-30febb45c168","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47964","PortSpecifier":{"PortValue":47964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59e2e4fd-9483-47e3-bd9b-30febb45c168","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59e2e4fd-9483-47e3-bd9b-30febb45c168","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47964","PortSpecifier":{"PortValue":47964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236524,"nanos":616847994},"http":{"id":"59e2e4fd-9483-47e3-bd9b-30febb45c168","method":"POST","headers":{":authority":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59e2e4fd-9483-47e3-bd9b-30febb45c168","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Jg9Alq6cwLxlENQ3_KJzjFGm0C1HeXXf0jWbG7vkS5Id10c52pO6kgYH28mx"} {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"59e2e4fd-9483-47e3-bd9b-30febb45c168","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Jg9Alq6cwLxlENQ3_KJzjFGm0C1HeXXf0jWbG7vkS5Id10c52pO6kgYH28mx\"}"} {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"59e2e4fd-9483-47e3-bd9b-30febb45c168","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2e76dfde-1a0a-4a0c-a037-a358400fb999","keyName":"e2e-auth-iso-a-5c4fa8","subscription":"e2e-auth-iso-9c6e0a","tenant":"e2e-shared-a-09402f","userId":"2e76dfde-1a0a-4a0c-a037-a358400fb999","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59e2e4fd-9483-47e3-bd9b-30febb45c168","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59e2e4fd-9483-47e3-bd9b-30febb45c168","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59e2e4fd-9483-47e3-bd9b-30febb45c168","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59e2e4fd-9483-47e3-bd9b-30febb45c168","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-09402f/auth-test-model-09402f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-09402f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"59e2e4fd-9483-47e3-bd9b-30febb45c168","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59e2e4fd-9483-47e3-bd9b-30febb45c168","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59e2e4fd-9483-47e3-bd9b-30febb45c168","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59e2e4fd-9483-47e3-bd9b-30febb45c168","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-9c6e0a"} {"level":"info","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59e2e4fd-9483-47e3-bd9b-30febb45c168","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:15:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59e2e4fd-9483-47e3-bd9b-30febb45c168","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"} {"level":"info","ts":"2026-07-16T21:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a70419dd1fcd034eeac0d7487cb83f39d63529998464a5893bbbe2f02e75f9e"} {"level":"info","ts":"2026-07-16T21:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24"} {"level":"info","ts":"2026-07-16T21:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83e46939a114f47d8077ea7656fed9b879eb516ff6064860ded64d2cf59ea1bb"} {"level":"info","ts":"2026-07-16T21:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82"} {"level":"info","ts":"2026-07-16T21:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01dcf77896287dc62bcb794e70cdeb831ba6c3ca88120856edae774b51ae2f77"} {"level":"info","ts":"2026-07-16T21:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/865126bb723aa3884b3dc1a7d1def07661c02730dd60616d4d67110b60118a00"} {"level":"info","ts":"2026-07-16T21:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"} {"level":"info","ts":"2026-07-16T21:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e199d2a3feff1d49d29ddbbce5ea750de2e9b52fa35432e1cd8baa9481b5857e"} {"level":"info","ts":"2026-07-16T21:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/abff20808875cca7d3b346557de0035897b22d75a65455a6ab825caf17812a88"} {"level":"info","ts":"2026-07-16T21:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8629b5c17f693fe053ed2e769ff3702b1f2487ba0f0275b6540649a2ece7d97c"} {"level":"info","ts":"2026-07-16T21:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e28d354ed9de129d31a5b372a4c6386b78b5981bf31949f2e6bc13e7a812edd5"} {"level":"info","ts":"2026-07-16T21:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac35c5055ded9647fe30e42925dc757ed3d3b28f10fec29f68c2879e1dec2e51"} {"level":"info","ts":"2026-07-16T21:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45cd71dd16799a3a8acf38db81ea533458f3a03a2496b0a0ebe5dfc78120df87"} {"level":"info","ts":"2026-07-16T21:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6ef3536d75719488e0755cd92d244c7c764b6bc32dcef7ea0d8cd569402d30b"} {"level":"info","ts":"2026-07-16T21:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/732c5d01046763f4ba96cfeaa939962e7f58313ff00a725844fe41e59c1f0f24"} {"level":"info","ts":"2026-07-16T21:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"info","ts":"2026-07-16T21:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f9f0721aa1b26887b2e5184f9792d41910c6c26b640147b99c8cea07fdab1d2"} {"level":"info","ts":"2026-07-16T21:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/436a8475fab72da4e5f0deac5c7c65638c17ef9aec81682f754da6dcafad5fbe"} {"level":"info","ts":"2026-07-16T21:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9c5b70201f352afda1ed078f99109c78134b75e30c4effbbbc36b1ce9bd2f86"} {"level":"info","ts":"2026-07-16T21:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"info","ts":"2026-07-16T21:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f68aa084c2d5d3731aaf6178476a1094de8c244fb949e403c5d65ccfe0a2789e"} {"level":"info","ts":"2026-07-16T21:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb7f1087d99afb31b488b9deed80baae94fe9414b630cbbfdb77b7d46f7c0147"} {"level":"info","ts":"2026-07-16T21:15:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b682a96ae18025364b72327986d18814d4d3260adaae04e5dc2fc5a76a6ca7aa"} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82"} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82"} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82"} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e"} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82"} {"level":"error","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e"} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e"} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ca7a5e810638c9c828b5d15b75904d377cd54940ef37fadb7748bd8abec1657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e"} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ca7a5e810638c9c828b5d15b75904d377cd54940ef37fadb7748bd8abec1657","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82"} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ca7a5e810638c9c828b5d15b75904d377cd54940ef37fadb7748bd8abec1657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ca7a5e810638c9c828b5d15b75904d377cd54940ef37fadb7748bd8abec1657"} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ca7a5e810638c9c828b5d15b75904d377cd54940ef37fadb7748bd8abec1657","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e"} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ca7a5e810638c9c828b5d15b75904d377cd54940ef37fadb7748bd8abec1657","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ca7a5e810638c9c828b5d15b75904d377cd54940ef37fadb7748bd8abec1657"} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ca7a5e810638c9c828b5d15b75904d377cd54940ef37fadb7748bd8abec1657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ca7a5e810638c9c828b5d15b75904d377cd54940ef37fadb7748bd8abec1657"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e"} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ca7a5e810638c9c828b5d15b75904d377cd54940ef37fadb7748bd8abec1657","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e"} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ca7a5e810638c9c828b5d15b75904d377cd54940ef37fadb7748bd8abec1657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ca7a5e810638c9c828b5d15b75904d377cd54940ef37fadb7748bd8abec1657"} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ca7a5e810638c9c828b5d15b75904d377cd54940ef37fadb7748bd8abec1657","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ca7a5e810638c9c828b5d15b75904d377cd54940ef37fadb7748bd8abec1657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ca7a5e810638c9c828b5d15b75904d377cd54940ef37fadb7748bd8abec1657"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ca7a5e810638c9c828b5d15b75904d377cd54940ef37fadb7748bd8abec1657","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e"} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65613677f3dfbd1d1b31ee7b75a91876f71e4caf79d055bc5ecdf6cd30cc2d59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ca7a5e810638c9c828b5d15b75904d377cd54940ef37fadb7748bd8abec1657"} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65613677f3dfbd1d1b31ee7b75a91876f71e4caf79d055bc5ecdf6cd30cc2d59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c524052654dd74f97dbf635c701b292c5251d3d3ddbd9ca7567555f8a1e18bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65613677f3dfbd1d1b31ee7b75a91876f71e4caf79d055bc5ecdf6cd30cc2d59"} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c524052654dd74f97dbf635c701b292c5251d3d3ddbd9ca7567555f8a1e18bfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ca7a5e810638c9c828b5d15b75904d377cd54940ef37fadb7748bd8abec1657","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65613677f3dfbd1d1b31ee7b75a91876f71e4caf79d055bc5ecdf6cd30cc2d59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65613677f3dfbd1d1b31ee7b75a91876f71e4caf79d055bc5ecdf6cd30cc2d59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65613677f3dfbd1d1b31ee7b75a91876f71e4caf79d055bc5ecdf6cd30cc2d59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c524052654dd74f97dbf635c701b292c5251d3d3ddbd9ca7567555f8a1e18bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c524052654dd74f97dbf635c701b292c5251d3d3ddbd9ca7567555f8a1e18bfd"} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c524052654dd74f97dbf635c701b292c5251d3d3ddbd9ca7567555f8a1e18bfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65613677f3dfbd1d1b31ee7b75a91876f71e4caf79d055bc5ecdf6cd30cc2d59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c524052654dd74f97dbf635c701b292c5251d3d3ddbd9ca7567555f8a1e18bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c524052654dd74f97dbf635c701b292c5251d3d3ddbd9ca7567555f8a1e18bfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e"} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c524052654dd74f97dbf635c701b292c5251d3d3ddbd9ca7567555f8a1e18bfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c524052654dd74f97dbf635c701b292c5251d3d3ddbd9ca7567555f8a1e18bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c524052654dd74f97dbf635c701b292c5251d3d3ddbd9ca7567555f8a1e18bfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c524052654dd74f97dbf635c701b292c5251d3d3ddbd9ca7567555f8a1e18bfd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c524052654dd74f97dbf635c701b292c5251d3d3ddbd9ca7567555f8a1e18bfd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c524052654dd74f97dbf635c701b292c5251d3d3ddbd9ca7567555f8a1e18bfd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c524052654dd74f97dbf635c701b292c5251d3d3ddbd9ca7567555f8a1e18bfd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65613677f3dfbd1d1b31ee7b75a91876f71e4caf79d055bc5ecdf6cd30cc2d59"} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c524052654dd74f97dbf635c701b292c5251d3d3ddbd9ca7567555f8a1e18bfd"} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92b08280f9a64ab6b272cdff23d6dc308d8ddd9b4d1c1cf8790b88df1e27fe47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92b08280f9a64ab6b272cdff23d6dc308d8ddd9b4d1c1cf8790b88df1e27fe47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e1e99c6855a30c7a152a997a62196089ffdda02b7e2986ebb56d62ad86a97b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92b08280f9a64ab6b272cdff23d6dc308d8ddd9b4d1c1cf8790b88df1e27fe47"} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e1e99c6855a30c7a152a997a62196089ffdda02b7e2986ebb56d62ad86a97b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92b08280f9a64ab6b272cdff23d6dc308d8ddd9b4d1c1cf8790b88df1e27fe47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92b08280f9a64ab6b272cdff23d6dc308d8ddd9b4d1c1cf8790b88df1e27fe47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e1e99c6855a30c7a152a997a62196089ffdda02b7e2986ebb56d62ad86a97b3"} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92b08280f9a64ab6b272cdff23d6dc308d8ddd9b4d1c1cf8790b88df1e27fe47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e1e99c6855a30c7a152a997a62196089ffdda02b7e2986ebb56d62ad86a97b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e1e99c6855a30c7a152a997a62196089ffdda02b7e2986ebb56d62ad86a97b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92b08280f9a64ab6b272cdff23d6dc308d8ddd9b4d1c1cf8790b88df1e27fe47"} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e1e99c6855a30c7a152a997a62196089ffdda02b7e2986ebb56d62ad86a97b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92b08280f9a64ab6b272cdff23d6dc308d8ddd9b4d1c1cf8790b88df1e27fe47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e1e99c6855a30c7a152a997a62196089ffdda02b7e2986ebb56d62ad86a97b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e1e99c6855a30c7a152a997a62196089ffdda02b7e2986ebb56d62ad86a97b3"} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e1e99c6855a30c7a152a997a62196089ffdda02b7e2986ebb56d62ad86a97b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e1e99c6855a30c7a152a997a62196089ffdda02b7e2986ebb56d62ad86a97b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e1e99c6855a30c7a152a997a62196089ffdda02b7e2986ebb56d62ad86a97b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e1e99c6855a30c7a152a997a62196089ffdda02b7e2986ebb56d62ad86a97b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e1e99c6855a30c7a152a997a62196089ffdda02b7e2986ebb56d62ad86a97b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e1e99c6855a30c7a152a997a62196089ffdda02b7e2986ebb56d62ad86a97b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92b08280f9a64ab6b272cdff23d6dc308d8ddd9b4d1c1cf8790b88df1e27fe47"} {"level":"error","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2e1e99c6855a30c7a152a997a62196089ffdda02b7e2986ebb56d62ad86a97b3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2e1e99c6855a30c7a152a997a62196089ffdda02b7e2986ebb56d62ad86a97b3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"643e8386621901e1f1b2e28849fbc8fb53b850ac2275d1b98bac250a72d9e9fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e1e99c6855a30c7a152a997a62196089ffdda02b7e2986ebb56d62ad86a97b3"} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"643e8386621901e1f1b2e28849fbc8fb53b850ac2275d1b98bac250a72d9e9fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e1e99c6855a30c7a152a997a62196089ffdda02b7e2986ebb56d62ad86a97b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"643e8386621901e1f1b2e28849fbc8fb53b850ac2275d1b98bac250a72d9e9fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/643e8386621901e1f1b2e28849fbc8fb53b850ac2275d1b98bac250a72d9e9fc"} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"643e8386621901e1f1b2e28849fbc8fb53b850ac2275d1b98bac250a72d9e9fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"643e8386621901e1f1b2e28849fbc8fb53b850ac2275d1b98bac250a72d9e9fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"643e8386621901e1f1b2e28849fbc8fb53b850ac2275d1b98bac250a72d9e9fc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"643e8386621901e1f1b2e28849fbc8fb53b850ac2275d1b98bac250a72d9e9fc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"643e8386621901e1f1b2e28849fbc8fb53b850ac2275d1b98bac250a72d9e9fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"643e8386621901e1f1b2e28849fbc8fb53b850ac2275d1b98bac250a72d9e9fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/643e8386621901e1f1b2e28849fbc8fb53b850ac2275d1b98bac250a72d9e9fc"} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/643e8386621901e1f1b2e28849fbc8fb53b850ac2275d1b98bac250a72d9e9fc"} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"643e8386621901e1f1b2e28849fbc8fb53b850ac2275d1b98bac250a72d9e9fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["643e8386621901e1f1b2e28849fbc8fb53b850ac2275d1b98bac250a72d9e9fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"643e8386621901e1f1b2e28849fbc8fb53b850ac2275d1b98bac250a72d9e9fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"643e8386621901e1f1b2e28849fbc8fb53b850ac2275d1b98bac250a72d9e9fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"643e8386621901e1f1b2e28849fbc8fb53b850ac2275d1b98bac250a72d9e9fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"643e8386621901e1f1b2e28849fbc8fb53b850ac2275d1b98bac250a72d9e9fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/643e8386621901e1f1b2e28849fbc8fb53b850ac2275d1b98bac250a72d9e9fc"} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"643e8386621901e1f1b2e28849fbc8fb53b850ac2275d1b98bac250a72d9e9fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/643e8386621901e1f1b2e28849fbc8fb53b850ac2275d1b98bac250a72d9e9fc"} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"643e8386621901e1f1b2e28849fbc8fb53b850ac2275d1b98bac250a72d9e9fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["643e8386621901e1f1b2e28849fbc8fb53b850ac2275d1b98bac250a72d9e9fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"643e8386621901e1f1b2e28849fbc8fb53b850ac2275d1b98bac250a72d9e9fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"643e8386621901e1f1b2e28849fbc8fb53b850ac2275d1b98bac250a72d9e9fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/643e8386621901e1f1b2e28849fbc8fb53b850ac2275d1b98bac250a72d9e9fc"} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bac43390fba9d0479251bea130b6984444afb6cfad29fc227623a2e577bfafaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bac43390fba9d0479251bea130b6984444afb6cfad29fc227623a2e577bfafaa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bac43390fba9d0479251bea130b6984444afb6cfad29fc227623a2e577bfafaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac43390fba9d0479251bea130b6984444afb6cfad29fc227623a2e577bfafaa"} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bac43390fba9d0479251bea130b6984444afb6cfad29fc227623a2e577bfafaa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bac43390fba9d0479251bea130b6984444afb6cfad29fc227623a2e577bfafaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bac43390fba9d0479251bea130b6984444afb6cfad29fc227623a2e577bfafaa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bac43390fba9d0479251bea130b6984444afb6cfad29fc227623a2e577bfafaa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac43390fba9d0479251bea130b6984444afb6cfad29fc227623a2e577bfafaa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac43390fba9d0479251bea130b6984444afb6cfad29fc227623a2e577bfafaa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac43390fba9d0479251bea130b6984444afb6cfad29fc227623a2e577bfafaa"} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac43390fba9d0479251bea130b6984444afb6cfad29fc227623a2e577bfafaa"} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bac43390fba9d0479251bea130b6984444afb6cfad29fc227623a2e577bfafaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bac43390fba9d0479251bea130b6984444afb6cfad29fc227623a2e577bfafaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bac43390fba9d0479251bea130b6984444afb6cfad29fc227623a2e577bfafaa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bac43390fba9d0479251bea130b6984444afb6cfad29fc227623a2e577bfafaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bac43390fba9d0479251bea130b6984444afb6cfad29fc227623a2e577bfafaa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac43390fba9d0479251bea130b6984444afb6cfad29fc227623a2e577bfafaa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac43390fba9d0479251bea130b6984444afb6cfad29fc227623a2e577bfafaa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac43390fba9d0479251bea130b6984444afb6cfad29fc227623a2e577bfafaa"} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac43390fba9d0479251bea130b6984444afb6cfad29fc227623a2e577bfafaa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac43390fba9d0479251bea130b6984444afb6cfad29fc227623a2e577bfafaa"} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bac43390fba9d0479251bea130b6984444afb6cfad29fc227623a2e577bfafaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bac43390fba9d0479251bea130b6984444afb6cfad29fc227623a2e577bfafaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bac43390fba9d0479251bea130b6984444afb6cfad29fc227623a2e577bfafaa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bac43390fba9d0479251bea130b6984444afb6cfad29fc227623a2e577bfafaa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bac43390fba9d0479251bea130b6984444afb6cfad29fc227623a2e577bfafaa"} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5216d2948f44873f55e2aabd240496d9fc98e78382e429c03b67e63394b315a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5216d2948f44873f55e2aabd240496d9fc98e78382e429c03b67e63394b315a1"} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5216d2948f44873f55e2aabd240496d9fc98e78382e429c03b67e63394b315a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5216d2948f44873f55e2aabd240496d9fc98e78382e429c03b67e63394b315a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5216d2948f44873f55e2aabd240496d9fc98e78382e429c03b67e63394b315a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5216d2948f44873f55e2aabd240496d9fc98e78382e429c03b67e63394b315a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5216d2948f44873f55e2aabd240496d9fc98e78382e429c03b67e63394b315a1"} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5216d2948f44873f55e2aabd240496d9fc98e78382e429c03b67e63394b315a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5216d2948f44873f55e2aabd240496d9fc98e78382e429c03b67e63394b315a1"} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5216d2948f44873f55e2aabd240496d9fc98e78382e429c03b67e63394b315a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5216d2948f44873f55e2aabd240496d9fc98e78382e429c03b67e63394b315a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5216d2948f44873f55e2aabd240496d9fc98e78382e429c03b67e63394b315a1"} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5216d2948f44873f55e2aabd240496d9fc98e78382e429c03b67e63394b315a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5216d2948f44873f55e2aabd240496d9fc98e78382e429c03b67e63394b315a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5216d2948f44873f55e2aabd240496d9fc98e78382e429c03b67e63394b315a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5216d2948f44873f55e2aabd240496d9fc98e78382e429c03b67e63394b315a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5216d2948f44873f55e2aabd240496d9fc98e78382e429c03b67e63394b315a1"} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5216d2948f44873f55e2aabd240496d9fc98e78382e429c03b67e63394b315a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5b92dec9454c1a4e737a7007caacdce663fc72009f44da821b40850c3c29ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5b92dec9454c1a4e737a7007caacdce663fc72009f44da821b40850c3c29ab"} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deea92bb883e7749b4a4e48ca2584b4fcb9635af5dde28041fb50e50a4274a58"} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5216d2948f44873f55e2aabd240496d9fc98e78382e429c03b67e63394b315a1"} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5b92dec9454c1a4e737a7007caacdce663fc72009f44da821b40850c3c29ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deea92bb883e7749b4a4e48ca2584b4fcb9635af5dde28041fb50e50a4274a58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["deea92bb883e7749b4a4e48ca2584b4fcb9635af5dde28041fb50e50a4274a58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5b92dec9454c1a4e737a7007caacdce663fc72009f44da821b40850c3c29ab"} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f1a7c15882594579ca3b4c48b182ba4e5da72d842f7e52464ac4ce07add65e0"} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deea92bb883e7749b4a4e48ca2584b4fcb9635af5dde28041fb50e50a4274a58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5216d2948f44873f55e2aabd240496d9fc98e78382e429c03b67e63394b315a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5216d2948f44873f55e2aabd240496d9fc98e78382e429c03b67e63394b315a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a70419dd1fcd034eeac0d7487cb83f39d63529998464a5893bbbe2f02e75f9e"} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d1afeb86bd2ca306d79e929c91fe6f940e9f53be64b5ec098d13a54abd69503"} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5216d2948f44873f55e2aabd240496d9fc98e78382e429c03b67e63394b315a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5b92dec9454c1a4e737a7007caacdce663fc72009f44da821b40850c3c29ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e5b92dec9454c1a4e737a7007caacdce663fc72009f44da821b40850c3c29ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deea92bb883e7749b4a4e48ca2584b4fcb9635af5dde28041fb50e50a4274a58"} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de7ed86254aba0d89483be1affcb6bb9e6802f1e34a97d01961863f4532a6a3e"} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5216d2948f44873f55e2aabd240496d9fc98e78382e429c03b67e63394b315a1"} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5b92dec9454c1a4e737a7007caacdce663fc72009f44da821b40850c3c29ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f1a7c15882594579ca3b4c48b182ba4e5da72d842f7e52464ac4ce07add65e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f1a7c15882594579ca3b4c48b182ba4e5da72d842f7e52464ac4ce07add65e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24"} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98fd6d6a26f6be1d1ab2ec840674e3b39f013b74bccd6abaa41f773f140bd803"} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f1a7c15882594579ca3b4c48b182ba4e5da72d842f7e52464ac4ce07add65e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a70419dd1fcd034eeac0d7487cb83f39d63529998464a5893bbbe2f02e75f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a70419dd1fcd034eeac0d7487cb83f39d63529998464a5893bbbe2f02e75f9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5b92dec9454c1a4e737a7007caacdce663fc72009f44da821b40850c3c29ab"} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f1a7c15882594579ca3b4c48b182ba4e5da72d842f7e52464ac4ce07add65e0"} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a70419dd1fcd034eeac0d7487cb83f39d63529998464a5893bbbe2f02e75f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d1afeb86bd2ca306d79e929c91fe6f940e9f53be64b5ec098d13a54abd69503","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d1afeb86bd2ca306d79e929c91fe6f940e9f53be64b5ec098d13a54abd69503"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/732c5d01046763f4ba96cfeaa939962e7f58313ff00a725844fe41e59c1f0f24"} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62a06a55e1abf184f09c586b892b9e07bf26bf756fae211ab2de5f46e96e0542"} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d1afeb86bd2ca306d79e929c91fe6f940e9f53be64b5ec098d13a54abd69503","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deea92bb883e7749b4a4e48ca2584b4fcb9635af5dde28041fb50e50a4274a58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de7ed86254aba0d89483be1affcb6bb9e6802f1e34a97d01961863f4532a6a3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de7ed86254aba0d89483be1affcb6bb9e6802f1e34a97d01961863f4532a6a3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a70419dd1fcd034eeac0d7487cb83f39d63529998464a5893bbbe2f02e75f9e"} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d1afeb86bd2ca306d79e929c91fe6f940e9f53be64b5ec098d13a54abd69503"} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de7ed86254aba0d89483be1affcb6bb9e6802f1e34a97d01961863f4532a6a3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5216d2948f44873f55e2aabd240496d9fc98e78382e429c03b67e63394b315a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de7ed86254aba0d89483be1affcb6bb9e6802f1e34a97d01961863f4532a6a3e"} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98fd6d6a26f6be1d1ab2ec840674e3b39f013b74bccd6abaa41f773f140bd803","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98fd6d6a26f6be1d1ab2ec840674e3b39f013b74bccd6abaa41f773f140bd803"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24"} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98fd6d6a26f6be1d1ab2ec840674e3b39f013b74bccd6abaa41f773f140bd803","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98fd6d6a26f6be1d1ab2ec840674e3b39f013b74bccd6abaa41f773f140bd803"} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5b92dec9454c1a4e737a7007caacdce663fc72009f44da821b40850c3c29ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f1a7c15882594579ca3b4c48b182ba4e5da72d842f7e52464ac4ce07add65e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"732c5d01046763f4ba96cfeaa939962e7f58313ff00a725844fe41e59c1f0f24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["732c5d01046763f4ba96cfeaa939962e7f58313ff00a725844fe41e59c1f0f24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"732c5d01046763f4ba96cfeaa939962e7f58313ff00a725844fe41e59c1f0f24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62a06a55e1abf184f09c586b892b9e07bf26bf756fae211ab2de5f46e96e0542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62a06a55e1abf184f09c586b892b9e07bf26bf756fae211ab2de5f46e96e0542"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/732c5d01046763f4ba96cfeaa939962e7f58313ff00a725844fe41e59c1f0f24"} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62a06a55e1abf184f09c586b892b9e07bf26bf756fae211ab2de5f46e96e0542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a70419dd1fcd034eeac0d7487cb83f39d63529998464a5893bbbe2f02e75f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d1afeb86bd2ca306d79e929c91fe6f940e9f53be64b5ec098d13a54abd69503","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de7ed86254aba0d89483be1affcb6bb9e6802f1e34a97d01961863f4532a6a3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98fd6d6a26f6be1d1ab2ec840674e3b39f013b74bccd6abaa41f773f140bd803","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"732c5d01046763f4ba96cfeaa939962e7f58313ff00a725844fe41e59c1f0f24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62a06a55e1abf184f09c586b892b9e07bf26bf756fae211ab2de5f46e96e0542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:16:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:16:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62a06a55e1abf184f09c586b892b9e07bf26bf756fae211ab2de5f46e96e0542"} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62a06a55e1abf184f09c586b892b9e07bf26bf756fae211ab2de5f46e96e0542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62a06a55e1abf184f09c586b892b9e07bf26bf756fae211ab2de5f46e96e0542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62a06a55e1abf184f09c586b892b9e07bf26bf756fae211ab2de5f46e96e0542"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62a06a55e1abf184f09c586b892b9e07bf26bf756fae211ab2de5f46e96e0542"} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62a06a55e1abf184f09c586b892b9e07bf26bf756fae211ab2de5f46e96e0542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62a06a55e1abf184f09c586b892b9e07bf26bf756fae211ab2de5f46e96e0542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:16:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:16:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62a06a55e1abf184f09c586b892b9e07bf26bf756fae211ab2de5f46e96e0542"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62a06a55e1abf184f09c586b892b9e07bf26bf756fae211ab2de5f46e96e0542"} {"level":"error","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"62a06a55e1abf184f09c586b892b9e07bf26bf756fae211ab2de5f46e96e0542","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"62a06a55e1abf184f09c586b892b9e07bf26bf756fae211ab2de5f46e96e0542\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62a06a55e1abf184f09c586b892b9e07bf26bf756fae211ab2de5f46e96e0542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:16:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62a06a55e1abf184f09c586b892b9e07bf26bf756fae211ab2de5f46e96e0542","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9d34d85-ddba-4724-b1d5-f99b816768fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46304","PortSpecifier":{"PortValue":46304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9d34d85-ddba-4724-b1d5-f99b816768fd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9d34d85-ddba-4724-b1d5-f99b816768fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46304","PortSpecifier":{"PortValue":46304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236600,"nanos":767029407},"http":{"id":"c9d34d85-ddba-4724-b1d5-f99b816768fd","method":"POST","headers":{":authority":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c9d34d85-ddba-4724-b1d5-f99b816768fd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9d34d85-ddba-4724-b1d5-f99b816768fd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"86243fad-d46a-4074-8226-2625feaf915f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"]}} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9d34d85-ddba-4724-b1d5-f99b816768fd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"86243fad-d46a-4074-8226-2625feaf915f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9d34d85-ddba-4724-b1d5-f99b816768fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9d34d85-ddba-4724-b1d5-f99b816768fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9d34d85-ddba-4724-b1d5-f99b816768fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-09402f/sub-test-model-09402f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-09402f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c9d34d85-ddba-4724-b1d5-f99b816768fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9d34d85-ddba-4724-b1d5-f99b816768fd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9d34d85-ddba-4724-b1d5-f99b816768fd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9d34d85-ddba-4724-b1d5-f99b816768fd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9d34d85-ddba-4724-b1d5-f99b816768fd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"411d68cb-f684-4e30-883a-5a4c0e017141","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44358","PortSpecifier":{"PortValue":44358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"411d68cb-f684-4e30-883a-5a4c0e017141","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"411d68cb-f684-4e30-883a-5a4c0e017141","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44358","PortSpecifier":{"PortValue":44358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236600,"nanos":819276573},"http":{"id":"411d68cb-f684-4e30-883a-5a4c0e017141","method":"POST","headers":{":authority":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"411d68cb-f684-4e30-883a-5a4c0e017141","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"411d68cb-f684-4e30-883a-5a4c0e017141","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"86243fad-d46a-4074-8226-2625feaf915f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"]}} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"411d68cb-f684-4e30-883a-5a4c0e017141","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"86243fad-d46a-4074-8226-2625feaf915f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"411d68cb-f684-4e30-883a-5a4c0e017141","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"411d68cb-f684-4e30-883a-5a4c0e017141","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"411d68cb-f684-4e30-883a-5a4c0e017141","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-69d8e7/sub-test-model-69d8e7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-69d8e7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"411d68cb-f684-4e30-883a-5a4c0e017141","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"411d68cb-f684-4e30-883a-5a4c0e017141","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"411d68cb-f684-4e30-883a-5a4c0e017141","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"411d68cb-f684-4e30-883a-5a4c0e017141","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"411d68cb-f684-4e30-883a-5a4c0e017141","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d580475f-0ce9-42c7-a053-c04e09498f67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46320","PortSpecifier":{"PortValue":46320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d580475f-0ce9-42c7-a053-c04e09498f67","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d580475f-0ce9-42c7-a053-c04e09498f67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46320","PortSpecifier":{"PortValue":46320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236600,"nanos":865469760},"http":{"id":"d580475f-0ce9-42c7-a053-c04e09498f67","method":"GET","headers":{":authority":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d580475f-0ce9-42c7-a053-c04e09498f67","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1beyJ359z6w7axRmW_aknJV6GD5FWpBbzokxOFDmL6VchL4kxsDp8jdftjWVc"} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d580475f-0ce9-42c7-a053-c04e09498f67","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1beyJ359z6w7axRmW_aknJV6GD5FWpBbzokxOFDmL6VchL4kxsDp8jdftjWVc\"}"} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d580475f-0ce9-42c7-a053-c04e09498f67","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ca7891b7-9ab2-416e-a856-abc926017148","keyName":"e2e-sub-iso-3cf8b4","subscription":"e2e-a-only-24e200","tenant":"e2e-shared-a-09402f","userId":"ca7891b7-9ab2-416e-a856-abc926017148","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d580475f-0ce9-42c7-a053-c04e09498f67","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d580475f-0ce9-42c7-a053-c04e09498f67","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d580475f-0ce9-42c7-a053-c04e09498f67","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d580475f-0ce9-42c7-a053-c04e09498f67","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-09402f/sub-test-model-09402f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-09402f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d580475f-0ce9-42c7-a053-c04e09498f67","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d580475f-0ce9-42c7-a053-c04e09498f67","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-24e200"} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d580475f-0ce9-42c7-a053-c04e09498f67","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d580475f-0ce9-42c7-a053-c04e09498f67","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d580475f-0ce9-42c7-a053-c04e09498f67","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d580475f-0ce9-42c7-a053-c04e09498f67","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb7d367e-ea1f-422b-b809-f5246929658a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44364","PortSpecifier":{"PortValue":44364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fb7d367e-ea1f-422b-b809-f5246929658a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb7d367e-ea1f-422b-b809-f5246929658a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44364","PortSpecifier":{"PortValue":44364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236600,"nanos":914469514},"http":{"id":"fb7d367e-ea1f-422b-b809-f5246929658a","method":"GET","headers":{":authority":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fb7d367e-ea1f-422b-b809-f5246929658a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15PO68SuoxxSCNNWb_6XHK2AF2PqG8FdvodVpIfU4VSUmLXj2CKAF4v5DceBa"} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fb7d367e-ea1f-422b-b809-f5246929658a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-69d8e7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15PO68SuoxxSCNNWb_6XHK2AF2PqG8FdvodVpIfU4VSUmLXj2CKAF4v5DceBa\"}"} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fb7d367e-ea1f-422b-b809-f5246929658a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-69d8e7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5ba73017-2d46-438a-9f34-7247302a246f","keyName":"e2e-sub-iso-2f9479","subscription":"e2e-b-only-24e200","tenant":"e2e-shared-b-69d8e7","userId":"5ba73017-2d46-438a-9f34-7247302a246f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fb7d367e-ea1f-422b-b809-f5246929658a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb7d367e-ea1f-422b-b809-f5246929658a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb7d367e-ea1f-422b-b809-f5246929658a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb7d367e-ea1f-422b-b809-f5246929658a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-69d8e7/sub-test-model-69d8e7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-69d8e7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb7d367e-ea1f-422b-b809-f5246929658a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fb7d367e-ea1f-422b-b809-f5246929658a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb7d367e-ea1f-422b-b809-f5246929658a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb7d367e-ea1f-422b-b809-f5246929658a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-24e200"} {"level":"info","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb7d367e-ea1f-422b-b809-f5246929658a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:16:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb7d367e-ea1f-422b-b809-f5246929658a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a6e4458-1956-4064-95dc-9d8fafcc0a57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60736","PortSpecifier":{"PortValue":60736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2a6e4458-1956-4064-95dc-9d8fafcc0a57","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a6e4458-1956-4064-95dc-9d8fafcc0a57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60736","PortSpecifier":{"PortValue":60736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236615,"nanos":357089701},"http":{"id":"2a6e4458-1956-4064-95dc-9d8fafcc0a57","method":"POST","headers":{":authority":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2a6e4458-1956-4064-95dc-9d8fafcc0a57","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2a6e4458-1956-4064-95dc-9d8fafcc0a57","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"86243fad-d46a-4074-8226-2625feaf915f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"]}} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a6e4458-1956-4064-95dc-9d8fafcc0a57","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"86243fad-d46a-4074-8226-2625feaf915f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a6e4458-1956-4064-95dc-9d8fafcc0a57","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a6e4458-1956-4064-95dc-9d8fafcc0a57","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a6e4458-1956-4064-95dc-9d8fafcc0a57","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-09402f/sub-test-model-09402f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-09402f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2a6e4458-1956-4064-95dc-9d8fafcc0a57","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a6e4458-1956-4064-95dc-9d8fafcc0a57","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a6e4458-1956-4064-95dc-9d8fafcc0a57","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a6e4458-1956-4064-95dc-9d8fafcc0a57","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a6e4458-1956-4064-95dc-9d8fafcc0a57","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0161925f-24d3-4ff7-afc8-646723d395bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55460","PortSpecifier":{"PortValue":55460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0161925f-24d3-4ff7-afc8-646723d395bd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0161925f-24d3-4ff7-afc8-646723d395bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55460","PortSpecifier":{"PortValue":55460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236615,"nanos":421438519},"http":{"id":"0161925f-24d3-4ff7-afc8-646723d395bd","method":"POST","headers":{":authority":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0161925f-24d3-4ff7-afc8-646723d395bd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0161925f-24d3-4ff7-afc8-646723d395bd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"86243fad-d46a-4074-8226-2625feaf915f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"]}} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0161925f-24d3-4ff7-afc8-646723d395bd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"86243fad-d46a-4074-8226-2625feaf915f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0161925f-24d3-4ff7-afc8-646723d395bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0161925f-24d3-4ff7-afc8-646723d395bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0161925f-24d3-4ff7-afc8-646723d395bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-69d8e7/sub-test-model-69d8e7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-69d8e7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0161925f-24d3-4ff7-afc8-646723d395bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0161925f-24d3-4ff7-afc8-646723d395bd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0161925f-24d3-4ff7-afc8-646723d395bd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0161925f-24d3-4ff7-afc8-646723d395bd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0161925f-24d3-4ff7-afc8-646723d395bd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db896447-5fcb-41ee-a093-40502420d1f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60742","PortSpecifier":{"PortValue":60742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"db896447-5fcb-41ee-a093-40502420d1f9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db896447-5fcb-41ee-a093-40502420d1f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60742","PortSpecifier":{"PortValue":60742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236615,"nanos":463420965},"http":{"id":"db896447-5fcb-41ee-a093-40502420d1f9","method":"POST","headers":{":authority":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"db896447-5fcb-41ee-a093-40502420d1f9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vwe1Qo7oa28Ybi17_vqeJdA7dk6JEsDG189jbbVGxdLCrklBcA26jyfkgMwy"} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"db896447-5fcb-41ee-a093-40502420d1f9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vwe1Qo7oa28Ybi17_vqeJdA7dk6JEsDG189jbbVGxdLCrklBcA26jyfkgMwy\"}"} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"db896447-5fcb-41ee-a093-40502420d1f9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"af12de78-4587-4db8-8f5c-75e41eefa459","keyName":"e2e-sub-iso-ca18b2","subscription":"e2e-shared-sub-3e3b05","tenant":"e2e-shared-a-09402f","userId":"af12de78-4587-4db8-8f5c-75e41eefa459","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"db896447-5fcb-41ee-a093-40502420d1f9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db896447-5fcb-41ee-a093-40502420d1f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db896447-5fcb-41ee-a093-40502420d1f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db896447-5fcb-41ee-a093-40502420d1f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-09402f/sub-test-model-09402f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-09402f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db896447-5fcb-41ee-a093-40502420d1f9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db896447-5fcb-41ee-a093-40502420d1f9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db896447-5fcb-41ee-a093-40502420d1f9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-3e3b05"} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"db896447-5fcb-41ee-a093-40502420d1f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db896447-5fcb-41ee-a093-40502420d1f9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db896447-5fcb-41ee-a093-40502420d1f9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13ccadca-f75c-494e-9b9f-66640d959a06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55470","PortSpecifier":{"PortValue":55470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13ccadca-f75c-494e-9b9f-66640d959a06","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13ccadca-f75c-494e-9b9f-66640d959a06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55470","PortSpecifier":{"PortValue":55470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236615,"nanos":502032050},"http":{"id":"13ccadca-f75c-494e-9b9f-66640d959a06","method":"POST","headers":{":authority":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13ccadca-f75c-494e-9b9f-66640d959a06","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xy7t1y49wmbc6q7r_QyfFePTHiVetdQWCEAt8O82spfJYJ3JCqqc9Ly80plK"} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13ccadca-f75c-494e-9b9f-66640d959a06","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-69d8e7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xy7t1y49wmbc6q7r_QyfFePTHiVetdQWCEAt8O82spfJYJ3JCqqc9Ly80plK\"}"} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13ccadca-f75c-494e-9b9f-66640d959a06","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-69d8e7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b5cda752-d485-4243-8ebc-ee8e946fcfcf","keyName":"e2e-sub-iso-299d11","subscription":"e2e-shared-sub-3e3b05","tenant":"e2e-shared-b-69d8e7","userId":"b5cda752-d485-4243-8ebc-ee8e946fcfcf","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13ccadca-f75c-494e-9b9f-66640d959a06","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13ccadca-f75c-494e-9b9f-66640d959a06","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13ccadca-f75c-494e-9b9f-66640d959a06","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13ccadca-f75c-494e-9b9f-66640d959a06","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-69d8e7/sub-test-model-69d8e7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-69d8e7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"13ccadca-f75c-494e-9b9f-66640d959a06","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13ccadca-f75c-494e-9b9f-66640d959a06","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-3e3b05"} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13ccadca-f75c-494e-9b9f-66640d959a06","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13ccadca-f75c-494e-9b9f-66640d959a06","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13ccadca-f75c-494e-9b9f-66640d959a06","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:16:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13ccadca-f75c-494e-9b9f-66640d959a06","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a70419dd1fcd034eeac0d7487cb83f39d63529998464a5893bbbe2f02e75f9e"} {"level":"info","ts":"2026-07-16T21:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e1e99c6855a30c7a152a997a62196089ffdda02b7e2986ebb56d62ad86a97b3"} {"level":"info","ts":"2026-07-16T21:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"} {"level":"info","ts":"2026-07-16T21:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f1a7c15882594579ca3b4c48b182ba4e5da72d842f7e52464ac4ce07add65e0"} {"level":"info","ts":"2026-07-16T21:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c524052654dd74f97dbf635c701b292c5251d3d3ddbd9ca7567555f8a1e18bfd"} {"level":"info","ts":"2026-07-16T21:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ca7a5e810638c9c828b5d15b75904d377cd54940ef37fadb7748bd8abec1657"} {"level":"info","ts":"2026-07-16T21:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/732c5d01046763f4ba96cfeaa939962e7f58313ff00a725844fe41e59c1f0f24"} {"level":"info","ts":"2026-07-16T21:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/deea92bb883e7749b4a4e48ca2584b4fcb9635af5dde28041fb50e50a4274a58"} {"level":"info","ts":"2026-07-16T21:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24"} {"level":"info","ts":"2026-07-16T21:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de7ed86254aba0d89483be1affcb6bb9e6802f1e34a97d01961863f4532a6a3e"} {"level":"info","ts":"2026-07-16T21:17:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92b08280f9a64ab6b272cdff23d6dc308d8ddd9b4d1c1cf8790b88df1e27fe47"} {"level":"info","ts":"2026-07-16T21:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/643e8386621901e1f1b2e28849fbc8fb53b850ac2275d1b98bac250a72d9e9fc"} {"level":"info","ts":"2026-07-16T21:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d1afeb86bd2ca306d79e929c91fe6f940e9f53be64b5ec098d13a54abd69503"} {"level":"info","ts":"2026-07-16T21:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"} {"level":"info","ts":"2026-07-16T21:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98fd6d6a26f6be1d1ab2ec840674e3b39f013b74bccd6abaa41f773f140bd803"} {"level":"info","ts":"2026-07-16T21:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"info","ts":"2026-07-16T21:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62a06a55e1abf184f09c586b892b9e07bf26bf756fae211ab2de5f46e96e0542"} {"level":"info","ts":"2026-07-16T21:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bac43390fba9d0479251bea130b6984444afb6cfad29fc227623a2e577bfafaa"} {"level":"info","ts":"2026-07-16T21:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82"} {"level":"info","ts":"2026-07-16T21:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e5b92dec9454c1a4e737a7007caacdce663fc72009f44da821b40850c3c29ab"} {"level":"info","ts":"2026-07-16T21:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"info","ts":"2026-07-16T21:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5216d2948f44873f55e2aabd240496d9fc98e78382e429c03b67e63394b315a1"} {"level":"info","ts":"2026-07-16T21:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65613677f3dfbd1d1b31ee7b75a91876f71e4caf79d055bc5ecdf6cd30cc2d59"} {"level":"info","ts":"2026-07-16T21:17:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6ddb4669f5f0a95430a13e2ba72edcd52975ac421d9dd340b1ad34d6a01f64e"} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54df9bc8562390bca493897e959317fcc92129b32c9242037c309fdb3b0c82e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54df9bc8562390bca493897e959317fcc92129b32c9242037c309fdb3b0c82e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54df9bc8562390bca493897e959317fcc92129b32c9242037c309fdb3b0c82e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54df9bc8562390bca493897e959317fcc92129b32c9242037c309fdb3b0c82e7"} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54df9bc8562390bca493897e959317fcc92129b32c9242037c309fdb3b0c82e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54df9bc8562390bca493897e959317fcc92129b32c9242037c309fdb3b0c82e7"} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54df9bc8562390bca493897e959317fcc92129b32c9242037c309fdb3b0c82e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54df9bc8562390bca493897e959317fcc92129b32c9242037c309fdb3b0c82e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54df9bc8562390bca493897e959317fcc92129b32c9242037c309fdb3b0c82e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54df9bc8562390bca493897e959317fcc92129b32c9242037c309fdb3b0c82e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54df9bc8562390bca493897e959317fcc92129b32c9242037c309fdb3b0c82e7"} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49669590dcabbf737391e49ed14d0ad2f66790d542a66b17b05f43daf4a1440f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49669590dcabbf737391e49ed14d0ad2f66790d542a66b17b05f43daf4a1440f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49669590dcabbf737391e49ed14d0ad2f66790d542a66b17b05f43daf4a1440f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49669590dcabbf737391e49ed14d0ad2f66790d542a66b17b05f43daf4a1440f"} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49669590dcabbf737391e49ed14d0ad2f66790d542a66b17b05f43daf4a1440f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49669590dcabbf737391e49ed14d0ad2f66790d542a66b17b05f43daf4a1440f"} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49669590dcabbf737391e49ed14d0ad2f66790d542a66b17b05f43daf4a1440f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49669590dcabbf737391e49ed14d0ad2f66790d542a66b17b05f43daf4a1440f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49669590dcabbf737391e49ed14d0ad2f66790d542a66b17b05f43daf4a1440f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49669590dcabbf737391e49ed14d0ad2f66790d542a66b17b05f43daf4a1440f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49669590dcabbf737391e49ed14d0ad2f66790d542a66b17b05f43daf4a1440f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49669590dcabbf737391e49ed14d0ad2f66790d542a66b17b05f43daf4a1440f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49669590dcabbf737391e49ed14d0ad2f66790d542a66b17b05f43daf4a1440f"} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49669590dcabbf737391e49ed14d0ad2f66790d542a66b17b05f43daf4a1440f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"732c5d01046763f4ba96cfeaa939962e7f58313ff00a725844fe41e59c1f0f24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49669590dcabbf737391e49ed14d0ad2f66790d542a66b17b05f43daf4a1440f"} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"732c5d01046763f4ba96cfeaa939962e7f58313ff00a725844fe41e59c1f0f24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49669590dcabbf737391e49ed14d0ad2f66790d542a66b17b05f43daf4a1440f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49669590dcabbf737391e49ed14d0ad2f66790d542a66b17b05f43daf4a1440f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/732c5d01046763f4ba96cfeaa939962e7f58313ff00a725844fe41e59c1f0f24"} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49669590dcabbf737391e49ed14d0ad2f66790d542a66b17b05f43daf4a1440f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"732c5d01046763f4ba96cfeaa939962e7f58313ff00a725844fe41e59c1f0f24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"732c5d01046763f4ba96cfeaa939962e7f58313ff00a725844fe41e59c1f0f24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49669590dcabbf737391e49ed14d0ad2f66790d542a66b17b05f43daf4a1440f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"732c5d01046763f4ba96cfeaa939962e7f58313ff00a725844fe41e59c1f0f24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/732c5d01046763f4ba96cfeaa939962e7f58313ff00a725844fe41e59c1f0f24"} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"732c5d01046763f4ba96cfeaa939962e7f58313ff00a725844fe41e59c1f0f24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["732c5d01046763f4ba96cfeaa939962e7f58313ff00a725844fe41e59c1f0f24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49669590dcabbf737391e49ed14d0ad2f66790d542a66b17b05f43daf4a1440f"} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"732c5d01046763f4ba96cfeaa939962e7f58313ff00a725844fe41e59c1f0f24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"732c5d01046763f4ba96cfeaa939962e7f58313ff00a725844fe41e59c1f0f24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/732c5d01046763f4ba96cfeaa939962e7f58313ff00a725844fe41e59c1f0f24"} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"732c5d01046763f4ba96cfeaa939962e7f58313ff00a725844fe41e59c1f0f24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/732c5d01046763f4ba96cfeaa939962e7f58313ff00a725844fe41e59c1f0f24"} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"732c5d01046763f4ba96cfeaa939962e7f58313ff00a725844fe41e59c1f0f24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["732c5d01046763f4ba96cfeaa939962e7f58313ff00a725844fe41e59c1f0f24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24"} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"732c5d01046763f4ba96cfeaa939962e7f58313ff00a725844fe41e59c1f0f24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bacc3f374612b0fd2b684b7fc1e86957a5d8f0b62f798ad813fa0a310094d2af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/732c5d01046763f4ba96cfeaa939962e7f58313ff00a725844fe41e59c1f0f24"} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bacc3f374612b0fd2b684b7fc1e86957a5d8f0b62f798ad813fa0a310094d2af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"732c5d01046763f4ba96cfeaa939962e7f58313ff00a725844fe41e59c1f0f24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bacc3f374612b0fd2b684b7fc1e86957a5d8f0b62f798ad813fa0a310094d2af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bacc3f374612b0fd2b684b7fc1e86957a5d8f0b62f798ad813fa0a310094d2af"} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bacc3f374612b0fd2b684b7fc1e86957a5d8f0b62f798ad813fa0a310094d2af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24"} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bacc3f374612b0fd2b684b7fc1e86957a5d8f0b62f798ad813fa0a310094d2af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bacc3f374612b0fd2b684b7fc1e86957a5d8f0b62f798ad813fa0a310094d2af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/732c5d01046763f4ba96cfeaa939962e7f58313ff00a725844fe41e59c1f0f24"} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bacc3f374612b0fd2b684b7fc1e86957a5d8f0b62f798ad813fa0a310094d2af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05a36012d5a97bbd0dbb455150d1f17bb043f2596fe85c28c3407b39601b91c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bacc3f374612b0fd2b684b7fc1e86957a5d8f0b62f798ad813fa0a310094d2af"} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05a36012d5a97bbd0dbb455150d1f17bb043f2596fe85c28c3407b39601b91c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05a36012d5a97bbd0dbb455150d1f17bb043f2596fe85c28c3407b39601b91c9"} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bacc3f374612b0fd2b684b7fc1e86957a5d8f0b62f798ad813fa0a310094d2af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05a36012d5a97bbd0dbb455150d1f17bb043f2596fe85c28c3407b39601b91c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05a36012d5a97bbd0dbb455150d1f17bb043f2596fe85c28c3407b39601b91c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05a36012d5a97bbd0dbb455150d1f17bb043f2596fe85c28c3407b39601b91c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24"} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05a36012d5a97bbd0dbb455150d1f17bb043f2596fe85c28c3407b39601b91c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bacc3f374612b0fd2b684b7fc1e86957a5d8f0b62f798ad813fa0a310094d2af"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"817cfbccc1e4e3b6e926d0641f279d88396d0015b7d450cf709f4a82384a766a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05a36012d5a97bbd0dbb455150d1f17bb043f2596fe85c28c3407b39601b91c9"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"817cfbccc1e4e3b6e926d0641f279d88396d0015b7d450cf709f4a82384a766a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"817cfbccc1e4e3b6e926d0641f279d88396d0015b7d450cf709f4a82384a766a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/817cfbccc1e4e3b6e926d0641f279d88396d0015b7d450cf709f4a82384a766a"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"817cfbccc1e4e3b6e926d0641f279d88396d0015b7d450cf709f4a82384a766a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"817cfbccc1e4e3b6e926d0641f279d88396d0015b7d450cf709f4a82384a766a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["817cfbccc1e4e3b6e926d0641f279d88396d0015b7d450cf709f4a82384a766a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"817cfbccc1e4e3b6e926d0641f279d88396d0015b7d450cf709f4a82384a766a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"817cfbccc1e4e3b6e926d0641f279d88396d0015b7d450cf709f4a82384a766a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["817cfbccc1e4e3b6e926d0641f279d88396d0015b7d450cf709f4a82384a766a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24"} {"level":"error","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"817cfbccc1e4e3b6e926d0641f279d88396d0015b7d450cf709f4a82384a766a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"817cfbccc1e4e3b6e926d0641f279d88396d0015b7d450cf709f4a82384a766a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"817cfbccc1e4e3b6e926d0641f279d88396d0015b7d450cf709f4a82384a766a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/817cfbccc1e4e3b6e926d0641f279d88396d0015b7d450cf709f4a82384a766a"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"817cfbccc1e4e3b6e926d0641f279d88396d0015b7d450cf709f4a82384a766a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5a80728764d2753d51c5c94ed66af39f94f4b39f15f166417fa21877055fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5a80728764d2753d51c5c94ed66af39f94f4b39f15f166417fa21877055fdf"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5a80728764d2753d51c5c94ed66af39f94f4b39f15f166417fa21877055fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/817cfbccc1e4e3b6e926d0641f279d88396d0015b7d450cf709f4a82384a766a"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"817cfbccc1e4e3b6e926d0641f279d88396d0015b7d450cf709f4a82384a766a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["817cfbccc1e4e3b6e926d0641f279d88396d0015b7d450cf709f4a82384a766a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5a80728764d2753d51c5c94ed66af39f94f4b39f15f166417fa21877055fdf"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"817cfbccc1e4e3b6e926d0641f279d88396d0015b7d450cf709f4a82384a766a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5a80728764d2753d51c5c94ed66af39f94f4b39f15f166417fa21877055fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e5a80728764d2753d51c5c94ed66af39f94f4b39f15f166417fa21877055fdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5a80728764d2753d51c5c94ed66af39f94f4b39f15f166417fa21877055fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"817cfbccc1e4e3b6e926d0641f279d88396d0015b7d450cf709f4a82384a766a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/817cfbccc1e4e3b6e926d0641f279d88396d0015b7d450cf709f4a82384a766a"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"817cfbccc1e4e3b6e926d0641f279d88396d0015b7d450cf709f4a82384a766a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5a80728764d2753d51c5c94ed66af39f94f4b39f15f166417fa21877055fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5a80728764d2753d51c5c94ed66af39f94f4b39f15f166417fa21877055fdf"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5a80728764d2753d51c5c94ed66af39f94f4b39f15f166417fa21877055fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"817cfbccc1e4e3b6e926d0641f279d88396d0015b7d450cf709f4a82384a766a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["817cfbccc1e4e3b6e926d0641f279d88396d0015b7d450cf709f4a82384a766a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"817cfbccc1e4e3b6e926d0641f279d88396d0015b7d450cf709f4a82384a766a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5a80728764d2753d51c5c94ed66af39f94f4b39f15f166417fa21877055fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e5a80728764d2753d51c5c94ed66af39f94f4b39f15f166417fa21877055fdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5a80728764d2753d51c5c94ed66af39f94f4b39f15f166417fa21877055fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/817cfbccc1e4e3b6e926d0641f279d88396d0015b7d450cf709f4a82384a766a"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"817cfbccc1e4e3b6e926d0641f279d88396d0015b7d450cf709f4a82384a766a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5a80728764d2753d51c5c94ed66af39f94f4b39f15f166417fa21877055fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5a80728764d2753d51c5c94ed66af39f94f4b39f15f166417fa21877055fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"385e8f134a7b416dd31fc963fdd1c944c02af44f1bf6f6462db868239fcbf366","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5a80728764d2753d51c5c94ed66af39f94f4b39f15f166417fa21877055fdf"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"385e8f134a7b416dd31fc963fdd1c944c02af44f1bf6f6462db868239fcbf366","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5a80728764d2753d51c5c94ed66af39f94f4b39f15f166417fa21877055fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e5a80728764d2753d51c5c94ed66af39f94f4b39f15f166417fa21877055fdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5a80728764d2753d51c5c94ed66af39f94f4b39f15f166417fa21877055fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"385e8f134a7b416dd31fc963fdd1c944c02af44f1bf6f6462db868239fcbf366","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24"} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5a80728764d2753d51c5c94ed66af39f94f4b39f15f166417fa21877055fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"385e8f134a7b416dd31fc963fdd1c944c02af44f1bf6f6462db868239fcbf366","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/385e8f134a7b416dd31fc963fdd1c944c02af44f1bf6f6462db868239fcbf366"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"385e8f134a7b416dd31fc963fdd1c944c02af44f1bf6f6462db868239fcbf366","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"385e8f134a7b416dd31fc963fdd1c944c02af44f1bf6f6462db868239fcbf366","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["385e8f134a7b416dd31fc963fdd1c944c02af44f1bf6f6462db868239fcbf366"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5a80728764d2753d51c5c94ed66af39f94f4b39f15f166417fa21877055fdf"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"385e8f134a7b416dd31fc963fdd1c944c02af44f1bf6f6462db868239fcbf366","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"385e8f134a7b416dd31fc963fdd1c944c02af44f1bf6f6462db868239fcbf366","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/385e8f134a7b416dd31fc963fdd1c944c02af44f1bf6f6462db868239fcbf366"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"385e8f134a7b416dd31fc963fdd1c944c02af44f1bf6f6462db868239fcbf366","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"385e8f134a7b416dd31fc963fdd1c944c02af44f1bf6f6462db868239fcbf366","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/385e8f134a7b416dd31fc963fdd1c944c02af44f1bf6f6462db868239fcbf366"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"385e8f134a7b416dd31fc963fdd1c944c02af44f1bf6f6462db868239fcbf366","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["385e8f134a7b416dd31fc963fdd1c944c02af44f1bf6f6462db868239fcbf366"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"385e8f134a7b416dd31fc963fdd1c944c02af44f1bf6f6462db868239fcbf366","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41afb5d32a63bcfb993c5121a467d0b8c011206a69765ac1d3b0fce5f0c6c44c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41afb5d32a63bcfb993c5121a467d0b8c011206a69765ac1d3b0fce5f0c6c44c"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41afb5d32a63bcfb993c5121a467d0b8c011206a69765ac1d3b0fce5f0c6c44c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"385e8f134a7b416dd31fc963fdd1c944c02af44f1bf6f6462db868239fcbf366","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/385e8f134a7b416dd31fc963fdd1c944c02af44f1bf6f6462db868239fcbf366"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"385e8f134a7b416dd31fc963fdd1c944c02af44f1bf6f6462db868239fcbf366","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"120723b76b0b7da1866507824bdb5032de4941941abd865d263778dba23e5f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/120723b76b0b7da1866507824bdb5032de4941941abd865d263778dba23e5f7f"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41afb5d32a63bcfb993c5121a467d0b8c011206a69765ac1d3b0fce5f0c6c44c"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"120723b76b0b7da1866507824bdb5032de4941941abd865d263778dba23e5f7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/385e8f134a7b416dd31fc963fdd1c944c02af44f1bf6f6462db868239fcbf366"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b61bc46f457e587d35056956c97055a5e475b794fde972c847b3f84ad2fd2a91"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41afb5d32a63bcfb993c5121a467d0b8c011206a69765ac1d3b0fce5f0c6c44c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41afb5d32a63bcfb993c5121a467d0b8c011206a69765ac1d3b0fce5f0c6c44c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ed85a9e8d7ddee47ade01bb6f156e3146318e193eedec741d0d1a83400256f2"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/120723b76b0b7da1866507824bdb5032de4941941abd865d263778dba23e5f7f"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41afb5d32a63bcfb993c5121a467d0b8c011206a69765ac1d3b0fce5f0c6c44c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"385e8f134a7b416dd31fc963fdd1c944c02af44f1bf6f6462db868239fcbf366","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["385e8f134a7b416dd31fc963fdd1c944c02af44f1bf6f6462db868239fcbf366"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a70419dd1fcd034eeac0d7487cb83f39d63529998464a5893bbbe2f02e75f9e"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77ff79e91447b28c109eb3083fc50bf6eccd73cc81980e0109a41778873d8931"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"385e8f134a7b416dd31fc963fdd1c944c02af44f1bf6f6462db868239fcbf366","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b61bc46f457e587d35056956c97055a5e475b794fde972c847b3f84ad2fd2a91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b61bc46f457e587d35056956c97055a5e475b794fde972c847b3f84ad2fd2a91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41afb5d32a63bcfb993c5121a467d0b8c011206a69765ac1d3b0fce5f0c6c44c"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b61bc46f457e587d35056956c97055a5e475b794fde972c847b3f84ad2fd2a91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ed85a9e8d7ddee47ade01bb6f156e3146318e193eedec741d0d1a83400256f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ed85a9e8d7ddee47ade01bb6f156e3146318e193eedec741d0d1a83400256f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/129ae51593993b7cbb78f31e3bee1501fb6c6fd157bddbe720f10370017fe3a6"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05c06fda020b05dfd33ca312dd0eff2410190cfb4c515014ad48054febd65e27"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ed85a9e8d7ddee47ade01bb6f156e3146318e193eedec741d0d1a83400256f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"120723b76b0b7da1866507824bdb5032de4941941abd865d263778dba23e5f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["120723b76b0b7da1866507824bdb5032de4941941abd865d263778dba23e5f7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085aedecb457137a3d0879fd9a57eccba7d8e31ed18dfdb1ff0cc9a8f48517f9"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/385e8f134a7b416dd31fc963fdd1c944c02af44f1bf6f6462db868239fcbf366"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"120723b76b0b7da1866507824bdb5032de4941941abd865d263778dba23e5f7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a70419dd1fcd034eeac0d7487cb83f39d63529998464a5893bbbe2f02e75f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a70419dd1fcd034eeac0d7487cb83f39d63529998464a5893bbbe2f02e75f9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d8955fef09146a6bfae0f7d8b0a907da85ce4a002c72e1af5f794298d40ac0e"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b61bc46f457e587d35056956c97055a5e475b794fde972c847b3f84ad2fd2a91"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a70419dd1fcd034eeac0d7487cb83f39d63529998464a5893bbbe2f02e75f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77ff79e91447b28c109eb3083fc50bf6eccd73cc81980e0109a41778873d8931","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77ff79e91447b28c109eb3083fc50bf6eccd73cc81980e0109a41778873d8931"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"info","ts":"2026-07-16T21:18:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ed85a9e8d7ddee47ade01bb6f156e3146318e193eedec741d0d1a83400256f2"} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77ff79e91447b28c109eb3083fc50bf6eccd73cc81980e0109a41778873d8931","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/120723b76b0b7da1866507824bdb5032de4941941abd865d263778dba23e5f7f"} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a70419dd1fcd034eeac0d7487cb83f39d63529998464a5893bbbe2f02e75f9e"} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77ff79e91447b28c109eb3083fc50bf6eccd73cc81980e0109a41778873d8931"} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41afb5d32a63bcfb993c5121a467d0b8c011206a69765ac1d3b0fce5f0c6c44c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"129ae51593993b7cbb78f31e3bee1501fb6c6fd157bddbe720f10370017fe3a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["129ae51593993b7cbb78f31e3bee1501fb6c6fd157bddbe720f10370017fe3a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"129ae51593993b7cbb78f31e3bee1501fb6c6fd157bddbe720f10370017fe3a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05c06fda020b05dfd33ca312dd0eff2410190cfb4c515014ad48054febd65e27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05c06fda020b05dfd33ca312dd0eff2410190cfb4c515014ad48054febd65e27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05c06fda020b05dfd33ca312dd0eff2410190cfb4c515014ad48054febd65e27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"085aedecb457137a3d0879fd9a57eccba7d8e31ed18dfdb1ff0cc9a8f48517f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["085aedecb457137a3d0879fd9a57eccba7d8e31ed18dfdb1ff0cc9a8f48517f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/129ae51593993b7cbb78f31e3bee1501fb6c6fd157bddbe720f10370017fe3a6"} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05c06fda020b05dfd33ca312dd0eff2410190cfb4c515014ad48054febd65e27"} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"085aedecb457137a3d0879fd9a57eccba7d8e31ed18dfdb1ff0cc9a8f48517f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"385e8f134a7b416dd31fc963fdd1c944c02af44f1bf6f6462db868239fcbf366","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d8955fef09146a6bfae0f7d8b0a907da85ce4a002c72e1af5f794298d40ac0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d8955fef09146a6bfae0f7d8b0a907da85ce4a002c72e1af5f794298d40ac0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/085aedecb457137a3d0879fd9a57eccba7d8e31ed18dfdb1ff0cc9a8f48517f9"} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d8955fef09146a6bfae0f7d8b0a907da85ce4a002c72e1af5f794298d40ac0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d8955fef09146a6bfae0f7d8b0a907da85ce4a002c72e1af5f794298d40ac0e"} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b61bc46f457e587d35056956c97055a5e475b794fde972c847b3f84ad2fd2a91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ed85a9e8d7ddee47ade01bb6f156e3146318e193eedec741d0d1a83400256f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"120723b76b0b7da1866507824bdb5032de4941941abd865d263778dba23e5f7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a70419dd1fcd034eeac0d7487cb83f39d63529998464a5893bbbe2f02e75f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77ff79e91447b28c109eb3083fc50bf6eccd73cc81980e0109a41778873d8931","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"129ae51593993b7cbb78f31e3bee1501fb6c6fd157bddbe720f10370017fe3a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05c06fda020b05dfd33ca312dd0eff2410190cfb4c515014ad48054febd65e27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"085aedecb457137a3d0879fd9a57eccba7d8e31ed18dfdb1ff0cc9a8f48517f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d8955fef09146a6bfae0f7d8b0a907da85ce4a002c72e1af5f794298d40ac0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T21:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T21:18:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T21:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T21:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"error","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T21:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b465dcb9-4e4a-4627-85c4-6d5ab8de6553","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55128","PortSpecifier":{"PortValue":55128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b465dcb9-4e4a-4627-85c4-6d5ab8de6553","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b465dcb9-4e4a-4627-85c4-6d5ab8de6553","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55128","PortSpecifier":{"PortValue":55128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236699,"nanos":433798154},"http":{"id":"b465dcb9-4e4a-4627-85c4-6d5ab8de6553","method":"POST","headers":{":authority":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b465dcb9-4e4a-4627-85c4-6d5ab8de6553","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b465dcb9-4e4a-4627-85c4-6d5ab8de6553","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"86243fad-d46a-4074-8226-2625feaf915f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"]}} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b465dcb9-4e4a-4627-85c4-6d5ab8de6553","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"86243fad-d46a-4074-8226-2625feaf915f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b465dcb9-4e4a-4627-85c4-6d5ab8de6553","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b465dcb9-4e4a-4627-85c4-6d5ab8de6553","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b465dcb9-4e4a-4627-85c4-6d5ab8de6553","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-09402f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b465dcb9-4e4a-4627-85c4-6d5ab8de6553","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b465dcb9-4e4a-4627-85c4-6d5ab8de6553","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b465dcb9-4e4a-4627-85c4-6d5ab8de6553","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b465dcb9-4e4a-4627-85c4-6d5ab8de6553","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b465dcb9-4e4a-4627-85c4-6d5ab8de6553","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e74b835-43db-4cd2-b96f-999905df8737","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46880","PortSpecifier":{"PortValue":46880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5e74b835-43db-4cd2-b96f-999905df8737","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e74b835-43db-4cd2-b96f-999905df8737","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46880","PortSpecifier":{"PortValue":46880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236699,"nanos":483396493},"http":{"id":"5e74b835-43db-4cd2-b96f-999905df8737","method":"POST","headers":{":authority":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5e74b835-43db-4cd2-b96f-999905df8737","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5e74b835-43db-4cd2-b96f-999905df8737","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"86243fad-d46a-4074-8226-2625feaf915f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"]}} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5e74b835-43db-4cd2-b96f-999905df8737","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"86243fad-d46a-4074-8226-2625feaf915f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e74b835-43db-4cd2-b96f-999905df8737","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e74b835-43db-4cd2-b96f-999905df8737","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e74b835-43db-4cd2-b96f-999905df8737","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-69d8e7/rate-test-model-69d8e7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-69d8e7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5e74b835-43db-4cd2-b96f-999905df8737","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e74b835-43db-4cd2-b96f-999905df8737","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e74b835-43db-4cd2-b96f-999905df8737","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e74b835-43db-4cd2-b96f-999905df8737","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e74b835-43db-4cd2-b96f-999905df8737","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"edb75204-d88f-4885-8d81-1518dfaca0cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55140","PortSpecifier":{"PortValue":55140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"edb75204-d88f-4885-8d81-1518dfaca0cd","method":"POST","path":"/ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f/v1/completions","host":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"edb75204-d88f-4885-8d81-1518dfaca0cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55140","PortSpecifier":{"PortValue":55140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236699,"nanos":529737746},"http":{"id":"edb75204-d88f-4885-8d81-1518dfaca0cd","method":"POST","headers":{":authority":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"edb75204-d88f-4885-8d81-1518dfaca0cd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-DHqbJilCPxg8B9VI_pIVWvFlYkkCUohyDbvNIvzgJnsI5DuK6XJLWGPSahjA"} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"edb75204-d88f-4885-8d81-1518dfaca0cd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-DHqbJilCPxg8B9VI_pIVWvFlYkkCUohyDbvNIvzgJnsI5DuK6XJLWGPSahjA\"}"} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"edb75204-d88f-4885-8d81-1518dfaca0cd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f8fa2a21-a756-40b2-b3e4-c5912395889c","keyName":"e2e-rate-a-063a99","subscription":"e2e-rate-iso-a-063a99","tenant":"e2e-shared-a-09402f","userId":"f8fa2a21-a756-40b2-b3e4-c5912395889c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"edb75204-d88f-4885-8d81-1518dfaca0cd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f\",\"requestedSubscription\":\"e2e-rate-iso-a-063a99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"edb75204-d88f-4885-8d81-1518dfaca0cd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-09402f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-063a99","namespace":"ai-tenant-e2e-shared-a-09402f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"edb75204-d88f-4885-8d81-1518dfaca0cd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edb75204-d88f-4885-8d81-1518dfaca0cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edb75204-d88f-4885-8d81-1518dfaca0cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edb75204-d88f-4885-8d81-1518dfaca0cd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edb75204-d88f-4885-8d81-1518dfaca0cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-09402f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edb75204-d88f-4885-8d81-1518dfaca0cd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edb75204-d88f-4885-8d81-1518dfaca0cd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-063a99"} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edb75204-d88f-4885-8d81-1518dfaca0cd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edb75204-d88f-4885-8d81-1518dfaca0cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f8fa2a21-a756-40b2-b3e4-c5912395889c","keyName":"e2e-rate-a-063a99","selected_subscription":"e2e-rate-iso-a-063a99","selected_subscription_key":"ai-tenant-e2e-shared-a-09402f/e2e-rate-iso-a-063a99@ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-09402f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-063a99","namespace":"ai-tenant-e2e-shared-a-09402f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"edb75204-d88f-4885-8d81-1518dfaca0cd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:18:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"edb75204-d88f-4885-8d81-1518dfaca0cd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:18:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c9f3b64-1204-4eeb-beed-deb6cbdc925b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55144","PortSpecifier":{"PortValue":55144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c9f3b64-1204-4eeb-beed-deb6cbdc925b","method":"POST","path":"/ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f/v1/completions","host":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:18:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c9f3b64-1204-4eeb-beed-deb6cbdc925b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55144","PortSpecifier":{"PortValue":55144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236700,"nanos":629223332},"http":{"id":"0c9f3b64-1204-4eeb-beed-deb6cbdc925b","method":"POST","headers":{":authority":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:18:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c9f3b64-1204-4eeb-beed-deb6cbdc925b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-DHqbJilCPxg8B9VI_pIVWvFlYkkCUohyDbvNIvzgJnsI5DuK6XJLWGPSahjA"} {"level":"debug","ts":"2026-07-16T21:18:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0c9f3b64-1204-4eeb-beed-deb6cbdc925b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-DHqbJilCPxg8B9VI_pIVWvFlYkkCUohyDbvNIvzgJnsI5DuK6XJLWGPSahjA\"}"} {"level":"debug","ts":"2026-07-16T21:18:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0c9f3b64-1204-4eeb-beed-deb6cbdc925b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f8fa2a21-a756-40b2-b3e4-c5912395889c","keyName":"e2e-rate-a-063a99","subscription":"e2e-rate-iso-a-063a99","tenant":"e2e-shared-a-09402f","userId":"f8fa2a21-a756-40b2-b3e4-c5912395889c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T21:18:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0c9f3b64-1204-4eeb-beed-deb6cbdc925b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f\",\"requestedSubscription\":\"e2e-rate-iso-a-063a99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T21:18:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0c9f3b64-1204-4eeb-beed-deb6cbdc925b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-09402f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-063a99","namespace":"ai-tenant-e2e-shared-a-09402f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T21:18:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c9f3b64-1204-4eeb-beed-deb6cbdc925b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:18:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c9f3b64-1204-4eeb-beed-deb6cbdc925b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c9f3b64-1204-4eeb-beed-deb6cbdc925b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c9f3b64-1204-4eeb-beed-deb6cbdc925b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-09402f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c9f3b64-1204-4eeb-beed-deb6cbdc925b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c9f3b64-1204-4eeb-beed-deb6cbdc925b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T21:18:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c9f3b64-1204-4eeb-beed-deb6cbdc925b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T21:18:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c9f3b64-1204-4eeb-beed-deb6cbdc925b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-063a99"} {"level":"debug","ts":"2026-07-16T21:18:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c9f3b64-1204-4eeb-beed-deb6cbdc925b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f8fa2a21-a756-40b2-b3e4-c5912395889c","keyName":"e2e-rate-a-063a99","selected_subscription":"e2e-rate-iso-a-063a99","selected_subscription_key":"ai-tenant-e2e-shared-a-09402f/e2e-rate-iso-a-063a99@ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-09402f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-063a99","namespace":"ai-tenant-e2e-shared-a-09402f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T21:18:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c9f3b64-1204-4eeb-beed-deb6cbdc925b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:18:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c9f3b64-1204-4eeb-beed-deb6cbdc925b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:18:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0581af18-dc3d-4dd4-9cfe-1fe3f63dd1f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40380","PortSpecifier":{"PortValue":40380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0581af18-dc3d-4dd4-9cfe-1fe3f63dd1f8","method":"POST","path":"/ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f/v1/completions","host":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:18:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0581af18-dc3d-4dd4-9cfe-1fe3f63dd1f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40380","PortSpecifier":{"PortValue":40380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236701,"nanos":671293694},"http":{"id":"0581af18-dc3d-4dd4-9cfe-1fe3f63dd1f8","method":"POST","headers":{":authority":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:18:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0581af18-dc3d-4dd4-9cfe-1fe3f63dd1f8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-DHqbJilCPxg8B9VI_pIVWvFlYkkCUohyDbvNIvzgJnsI5DuK6XJLWGPSahjA"} {"level":"debug","ts":"2026-07-16T21:18:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0581af18-dc3d-4dd4-9cfe-1fe3f63dd1f8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-DHqbJilCPxg8B9VI_pIVWvFlYkkCUohyDbvNIvzgJnsI5DuK6XJLWGPSahjA\"}"} {"level":"debug","ts":"2026-07-16T21:18:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0581af18-dc3d-4dd4-9cfe-1fe3f63dd1f8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f8fa2a21-a756-40b2-b3e4-c5912395889c","keyName":"e2e-rate-a-063a99","subscription":"e2e-rate-iso-a-063a99","tenant":"e2e-shared-a-09402f","userId":"f8fa2a21-a756-40b2-b3e4-c5912395889c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T21:18:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0581af18-dc3d-4dd4-9cfe-1fe3f63dd1f8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f\",\"requestedSubscription\":\"e2e-rate-iso-a-063a99\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T21:18:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0581af18-dc3d-4dd4-9cfe-1fe3f63dd1f8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-09402f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-063a99","namespace":"ai-tenant-e2e-shared-a-09402f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T21:18:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0581af18-dc3d-4dd4-9cfe-1fe3f63dd1f8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:18:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0581af18-dc3d-4dd4-9cfe-1fe3f63dd1f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0581af18-dc3d-4dd4-9cfe-1fe3f63dd1f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0581af18-dc3d-4dd4-9cfe-1fe3f63dd1f8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0581af18-dc3d-4dd4-9cfe-1fe3f63dd1f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-09402f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0581af18-dc3d-4dd4-9cfe-1fe3f63dd1f8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T21:18:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0581af18-dc3d-4dd4-9cfe-1fe3f63dd1f8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T21:18:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0581af18-dc3d-4dd4-9cfe-1fe3f63dd1f8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-063a99"} {"level":"debug","ts":"2026-07-16T21:18:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0581af18-dc3d-4dd4-9cfe-1fe3f63dd1f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f8fa2a21-a756-40b2-b3e4-c5912395889c","keyName":"e2e-rate-a-063a99","selected_subscription":"e2e-rate-iso-a-063a99","selected_subscription_key":"ai-tenant-e2e-shared-a-09402f/e2e-rate-iso-a-063a99@ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-09402f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-063a99","namespace":"ai-tenant-e2e-shared-a-09402f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T21:18:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0581af18-dc3d-4dd4-9cfe-1fe3f63dd1f8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:18:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0581af18-dc3d-4dd4-9cfe-1fe3f63dd1f8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82ef115e-5b4c-4114-9b41-be00c960db10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56422","PortSpecifier":{"PortValue":56422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82ef115e-5b4c-4114-9b41-be00c960db10","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82ef115e-5b4c-4114-9b41-be00c960db10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56422","PortSpecifier":{"PortValue":56422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236715,"nanos":596130130},"http":{"id":"82ef115e-5b4c-4114-9b41-be00c960db10","method":"POST","headers":{":authority":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"82ef115e-5b4c-4114-9b41-be00c960db10","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82ef115e-5b4c-4114-9b41-be00c960db10","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"86243fad-d46a-4074-8226-2625feaf915f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"]}} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82ef115e-5b4c-4114-9b41-be00c960db10","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"86243fad-d46a-4074-8226-2625feaf915f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82ef115e-5b4c-4114-9b41-be00c960db10","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82ef115e-5b4c-4114-9b41-be00c960db10","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82ef115e-5b4c-4114-9b41-be00c960db10","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-09402f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"82ef115e-5b4c-4114-9b41-be00c960db10","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82ef115e-5b4c-4114-9b41-be00c960db10","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82ef115e-5b4c-4114-9b41-be00c960db10","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82ef115e-5b4c-4114-9b41-be00c960db10","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82ef115e-5b4c-4114-9b41-be00c960db10","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cdfa74c6-cfd9-4c6a-98f0-5ac770f8523d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42622","PortSpecifier":{"PortValue":42622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cdfa74c6-cfd9-4c6a-98f0-5ac770f8523d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cdfa74c6-cfd9-4c6a-98f0-5ac770f8523d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42622","PortSpecifier":{"PortValue":42622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236715,"nanos":642373213},"http":{"id":"cdfa74c6-cfd9-4c6a-98f0-5ac770f8523d","method":"POST","headers":{":authority":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cdfa74c6-cfd9-4c6a-98f0-5ac770f8523d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cdfa74c6-cfd9-4c6a-98f0-5ac770f8523d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"86243fad-d46a-4074-8226-2625feaf915f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"]}} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cdfa74c6-cfd9-4c6a-98f0-5ac770f8523d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9360930fb578"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c47250e7-f591-426f-8d7a-abba7f22cc26"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"86243fad-d46a-4074-8226-2625feaf915f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cdfa74c6-cfd9-4c6a-98f0-5ac770f8523d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cdfa74c6-cfd9-4c6a-98f0-5ac770f8523d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cdfa74c6-cfd9-4c6a-98f0-5ac770f8523d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-69d8e7/rate-test-model-69d8e7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-69d8e7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cdfa74c6-cfd9-4c6a-98f0-5ac770f8523d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cdfa74c6-cfd9-4c6a-98f0-5ac770f8523d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cdfa74c6-cfd9-4c6a-98f0-5ac770f8523d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cdfa74c6-cfd9-4c6a-98f0-5ac770f8523d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cdfa74c6-cfd9-4c6a-98f0-5ac770f8523d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f150e0df-d60d-459e-a96e-3e17d1848ceb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56434","PortSpecifier":{"PortValue":56434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f150e0df-d60d-459e-a96e-3e17d1848ceb","method":"POST","path":"/ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f/v1/completions","host":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f150e0df-d60d-459e-a96e-3e17d1848ceb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56434","PortSpecifier":{"PortValue":56434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236715,"nanos":679954725},"http":{"id":"f150e0df-d60d-459e-a96e-3e17d1848ceb","method":"POST","headers":{":authority":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f150e0df-d60d-459e-a96e-3e17d1848ceb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JGCl9UMWOjRWRtiE_vepLg4R4R9Cf1gf88taEyU6g5r57DlgwwbQnGJ4VCUn"} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f150e0df-d60d-459e-a96e-3e17d1848ceb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JGCl9UMWOjRWRtiE_vepLg4R4R9Cf1gf88taEyU6g5r57DlgwwbQnGJ4VCUn\"}"} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f150e0df-d60d-459e-a96e-3e17d1848ceb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dac3334b-d2df-4f72-85b7-7c56ff5e2537","keyName":"e2e-rate-a-cdad0d","subscription":"e2e-rate-iso-a-cdad0d","tenant":"e2e-shared-a-09402f","userId":"dac3334b-d2df-4f72-85b7-7c56ff5e2537","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f150e0df-d60d-459e-a96e-3e17d1848ceb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f\",\"requestedSubscription\":\"e2e-rate-iso-a-cdad0d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f150e0df-d60d-459e-a96e-3e17d1848ceb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-09402f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cdad0d","namespace":"ai-tenant-e2e-shared-a-09402f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f150e0df-d60d-459e-a96e-3e17d1848ceb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f150e0df-d60d-459e-a96e-3e17d1848ceb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f150e0df-d60d-459e-a96e-3e17d1848ceb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f150e0df-d60d-459e-a96e-3e17d1848ceb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-09402f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f150e0df-d60d-459e-a96e-3e17d1848ceb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f150e0df-d60d-459e-a96e-3e17d1848ceb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f150e0df-d60d-459e-a96e-3e17d1848ceb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cdad0d"} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f150e0df-d60d-459e-a96e-3e17d1848ceb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f150e0df-d60d-459e-a96e-3e17d1848ceb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dac3334b-d2df-4f72-85b7-7c56ff5e2537","keyName":"e2e-rate-a-cdad0d","selected_subscription":"e2e-rate-iso-a-cdad0d","selected_subscription_key":"ai-tenant-e2e-shared-a-09402f/e2e-rate-iso-a-cdad0d@ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-09402f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cdad0d","namespace":"ai-tenant-e2e-shared-a-09402f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f150e0df-d60d-459e-a96e-3e17d1848ceb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:18:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f150e0df-d60d-459e-a96e-3e17d1848ceb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:18:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8f76ef9-86da-4f14-8cfa-df5160b47f1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56450","PortSpecifier":{"PortValue":56450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d8f76ef9-86da-4f14-8cfa-df5160b47f1e","method":"POST","path":"/ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f/v1/completions","host":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:18:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8f76ef9-86da-4f14-8cfa-df5160b47f1e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56450","PortSpecifier":{"PortValue":56450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236716,"nanos":720193279},"http":{"id":"d8f76ef9-86da-4f14-8cfa-df5160b47f1e","method":"POST","headers":{":authority":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:18:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d8f76ef9-86da-4f14-8cfa-df5160b47f1e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JGCl9UMWOjRWRtiE_vepLg4R4R9Cf1gf88taEyU6g5r57DlgwwbQnGJ4VCUn"} {"level":"debug","ts":"2026-07-16T21:18:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d8f76ef9-86da-4f14-8cfa-df5160b47f1e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JGCl9UMWOjRWRtiE_vepLg4R4R9Cf1gf88taEyU6g5r57DlgwwbQnGJ4VCUn\"}"} {"level":"debug","ts":"2026-07-16T21:18:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d8f76ef9-86da-4f14-8cfa-df5160b47f1e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dac3334b-d2df-4f72-85b7-7c56ff5e2537","keyName":"e2e-rate-a-cdad0d","subscription":"e2e-rate-iso-a-cdad0d","tenant":"e2e-shared-a-09402f","userId":"dac3334b-d2df-4f72-85b7-7c56ff5e2537","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T21:18:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d8f76ef9-86da-4f14-8cfa-df5160b47f1e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f\",\"requestedSubscription\":\"e2e-rate-iso-a-cdad0d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T21:18:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d8f76ef9-86da-4f14-8cfa-df5160b47f1e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-09402f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cdad0d","namespace":"ai-tenant-e2e-shared-a-09402f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T21:18:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d8f76ef9-86da-4f14-8cfa-df5160b47f1e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:18:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8f76ef9-86da-4f14-8cfa-df5160b47f1e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8f76ef9-86da-4f14-8cfa-df5160b47f1e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8f76ef9-86da-4f14-8cfa-df5160b47f1e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-09402f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8f76ef9-86da-4f14-8cfa-df5160b47f1e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8f76ef9-86da-4f14-8cfa-df5160b47f1e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T21:18:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8f76ef9-86da-4f14-8cfa-df5160b47f1e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T21:18:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8f76ef9-86da-4f14-8cfa-df5160b47f1e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cdad0d"} {"level":"debug","ts":"2026-07-16T21:18:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8f76ef9-86da-4f14-8cfa-df5160b47f1e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dac3334b-d2df-4f72-85b7-7c56ff5e2537","keyName":"e2e-rate-a-cdad0d","selected_subscription":"e2e-rate-iso-a-cdad0d","selected_subscription_key":"ai-tenant-e2e-shared-a-09402f/e2e-rate-iso-a-cdad0d@ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-09402f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cdad0d","namespace":"ai-tenant-e2e-shared-a-09402f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T21:18:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8f76ef9-86da-4f14-8cfa-df5160b47f1e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:18:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8f76ef9-86da-4f14-8cfa-df5160b47f1e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c28a44ef-39d5-4dc3-97b8-0fe03577b0e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56456","PortSpecifier":{"PortValue":56456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c28a44ef-39d5-4dc3-97b8-0fe03577b0e8","method":"POST","path":"/ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f/v1/completions","host":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c28a44ef-39d5-4dc3-97b8-0fe03577b0e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56456","PortSpecifier":{"PortValue":56456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236717,"nanos":764382947},"http":{"id":"c28a44ef-39d5-4dc3-97b8-0fe03577b0e8","method":"POST","headers":{":authority":"e2e-shared-a-09402f.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c28a44ef-39d5-4dc3-97b8-0fe03577b0e8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JGCl9UMWOjRWRtiE_vepLg4R4R9Cf1gf88taEyU6g5r57DlgwwbQnGJ4VCUn"} {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c28a44ef-39d5-4dc3-97b8-0fe03577b0e8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JGCl9UMWOjRWRtiE_vepLg4R4R9Cf1gf88taEyU6g5r57DlgwwbQnGJ4VCUn\"}"} {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c28a44ef-39d5-4dc3-97b8-0fe03577b0e8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dac3334b-d2df-4f72-85b7-7c56ff5e2537","keyName":"e2e-rate-a-cdad0d","subscription":"e2e-rate-iso-a-cdad0d","tenant":"e2e-shared-a-09402f","userId":"dac3334b-d2df-4f72-85b7-7c56ff5e2537","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c28a44ef-39d5-4dc3-97b8-0fe03577b0e8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f\",\"requestedSubscription\":\"e2e-rate-iso-a-cdad0d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c28a44ef-39d5-4dc3-97b8-0fe03577b0e8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-09402f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-09402f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cdad0d","namespace":"ai-tenant-e2e-shared-a-09402f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c28a44ef-39d5-4dc3-97b8-0fe03577b0e8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c28a44ef-39d5-4dc3-97b8-0fe03577b0e8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c28a44ef-39d5-4dc3-97b8-0fe03577b0e8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c28a44ef-39d5-4dc3-97b8-0fe03577b0e8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-09402f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c28a44ef-39d5-4dc3-97b8-0fe03577b0e8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c28a44ef-39d5-4dc3-97b8-0fe03577b0e8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c28a44ef-39d5-4dc3-97b8-0fe03577b0e8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cdad0d"} {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c28a44ef-39d5-4dc3-97b8-0fe03577b0e8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c28a44ef-39d5-4dc3-97b8-0fe03577b0e8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dac3334b-d2df-4f72-85b7-7c56ff5e2537","keyName":"e2e-rate-a-cdad0d","selected_subscription":"e2e-rate-iso-a-cdad0d","selected_subscription_key":"ai-tenant-e2e-shared-a-09402f/e2e-rate-iso-a-cdad0d@ai-tenant-e2e-shared-a-09402f/rate-test-model-09402f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-09402f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cdad0d","namespace":"ai-tenant-e2e-shared-a-09402f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c28a44ef-39d5-4dc3-97b8-0fe03577b0e8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c28a44ef-39d5-4dc3-97b8-0fe03577b0e8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03774ebc-b489-41ef-9cc0-8f8d4fa58b96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42638","PortSpecifier":{"PortValue":42638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03774ebc-b489-41ef-9cc0-8f8d4fa58b96","method":"POST","path":"/ai-tenant-e2e-shared-b-69d8e7/rate-test-model-69d8e7/v1/completions","host":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03774ebc-b489-41ef-9cc0-8f8d4fa58b96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42638","PortSpecifier":{"PortValue":42638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784236717,"nanos":803410073},"http":{"id":"03774ebc-b489-41ef-9cc0-8f8d4fa58b96","method":"POST","headers":{":authority":"e2e-shared-b-69d8e7.apps.d2cf5c7b-8f02-4ea0-b95c-9360930fb578.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-69d8e7/rate-test-model-69d8e7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03774ebc-b489-41ef-9cc0-8f8d4fa58b96","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-t27clMv8GRNzi9LO_jLLOP2RGWRlHP855tkGeGX1v7nUrZAqjfoMCxsWzPPJ"} {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"03774ebc-b489-41ef-9cc0-8f8d4fa58b96","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-69d8e7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-t27clMv8GRNzi9LO_jLLOP2RGWRlHP855tkGeGX1v7nUrZAqjfoMCxsWzPPJ\"}"} {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"03774ebc-b489-41ef-9cc0-8f8d4fa58b96","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-69d8e7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"657c54bc-bd21-446f-bad4-1e817d292055","keyName":"e2e-rate-b-cdad0d","subscription":"e2e-rate-iso-b-cdad0d","tenant":"e2e-shared-b-69d8e7","userId":"657c54bc-bd21-446f-bad4-1e817d292055","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"03774ebc-b489-41ef-9cc0-8f8d4fa58b96","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-69d8e7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-69d8e7/rate-test-model-69d8e7\",\"requestedSubscription\":\"e2e-rate-iso-b-cdad0d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"03774ebc-b489-41ef-9cc0-8f8d4fa58b96","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-69d8e7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-69d8e7","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-cdad0d","namespace":"ai-tenant-e2e-shared-b-69d8e7","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03774ebc-b489-41ef-9cc0-8f8d4fa58b96","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03774ebc-b489-41ef-9cc0-8f8d4fa58b96","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03774ebc-b489-41ef-9cc0-8f8d4fa58b96","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03774ebc-b489-41ef-9cc0-8f8d4fa58b96","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03774ebc-b489-41ef-9cc0-8f8d4fa58b96","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-69d8e7/rate-test-model-69d8e7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-69d8e7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03774ebc-b489-41ef-9cc0-8f8d4fa58b96","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-cdad0d"} {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03774ebc-b489-41ef-9cc0-8f8d4fa58b96","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03774ebc-b489-41ef-9cc0-8f8d4fa58b96","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03774ebc-b489-41ef-9cc0-8f8d4fa58b96","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"657c54bc-bd21-446f-bad4-1e817d292055","keyName":"e2e-rate-b-cdad0d","selected_subscription":"e2e-rate-iso-b-cdad0d","selected_subscription_key":"ai-tenant-e2e-shared-b-69d8e7/e2e-rate-iso-b-cdad0d@ai-tenant-e2e-shared-b-69d8e7/rate-test-model-69d8e7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-69d8e7","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-cdad0d","namespace":"ai-tenant-e2e-shared-b-69d8e7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03774ebc-b489-41ef-9cc0-8f8d4fa58b96","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T21:18:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03774ebc-b489-41ef-9cc0-8f8d4fa58b96","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T21:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/120723b76b0b7da1866507824bdb5032de4941941abd865d263778dba23e5f7f"} {"level":"info","ts":"2026-07-16T21:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a70419dd1fcd034eeac0d7487cb83f39d63529998464a5893bbbe2f02e75f9e"} {"level":"info","ts":"2026-07-16T21:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05c06fda020b05dfd33ca312dd0eff2410190cfb4c515014ad48054febd65e27"} {"level":"info","ts":"2026-07-16T21:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54df9bc8562390bca493897e959317fcc92129b32c9242037c309fdb3b0c82e7"} {"level":"info","ts":"2026-07-16T21:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82f74902d416497295b285c24a88a74a3fbe23d6c1a90e1625bd889910b24e24"} {"level":"info","ts":"2026-07-16T21:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/385e8f134a7b416dd31fc963fdd1c944c02af44f1bf6f6462db868239fcbf366"} {"level":"info","ts":"2026-07-16T21:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e5a80728764d2753d51c5c94ed66af39f94f4b39f15f166417fa21877055fdf"} {"level":"info","ts":"2026-07-16T21:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01b30850f09d4ca9b8c6507d570f44903ecb76b734440152acd654e6aa0ab690"} {"level":"info","ts":"2026-07-16T21:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/085aedecb457137a3d0879fd9a57eccba7d8e31ed18dfdb1ff0cc9a8f48517f9"} {"level":"info","ts":"2026-07-16T21:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1299303a72c6b4d3bc835f2f56c95f366a6a9967907ad97ba8df2578b5710d71"} {"level":"info","ts":"2026-07-16T21:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c1e762781cf666de2f7b47fdce05afbe1d3ef3523d83de9ff81270a3bd52f7a"} {"level":"info","ts":"2026-07-16T21:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41afb5d32a63bcfb993c5121a467d0b8c011206a69765ac1d3b0fce5f0c6c44c"} {"level":"info","ts":"2026-07-16T21:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05a36012d5a97bbd0dbb455150d1f17bb043f2596fe85c28c3407b39601b91c9"} {"level":"info","ts":"2026-07-16T21:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77ff79e91447b28c109eb3083fc50bf6eccd73cc81980e0109a41778873d8931"} {"level":"info","ts":"2026-07-16T21:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ed85a9e8d7ddee47ade01bb6f156e3146318e193eedec741d0d1a83400256f2"} {"level":"info","ts":"2026-07-16T21:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49669590dcabbf737391e49ed14d0ad2f66790d542a66b17b05f43daf4a1440f"} {"level":"info","ts":"2026-07-16T21:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/732c5d01046763f4ba96cfeaa939962e7f58313ff00a725844fe41e59c1f0f24"} {"level":"info","ts":"2026-07-16T21:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b61bc46f457e587d35056956c97055a5e475b794fde972c847b3f84ad2fd2a91"} {"level":"info","ts":"2026-07-16T21:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fa4846fa898981e839aca51c01ee4e04288fda98c9c51379d7035cf11bb2b82"} {"level":"info","ts":"2026-07-16T21:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/621bd6653d9d6f4d51b5552aa427c2e394daa0b9f60982814d59fadc97089255"} {"level":"info","ts":"2026-07-16T21:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/817cfbccc1e4e3b6e926d0641f279d88396d0015b7d450cf709f4a82384a766a"} {"level":"info","ts":"2026-07-16T21:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bacc3f374612b0fd2b684b7fc1e86957a5d8f0b62f798ad813fa0a310094d2af"} {"level":"info","ts":"2026-07-16T21:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/129ae51593993b7cbb78f31e3bee1501fb6c6fd157bddbe720f10370017fe3a6"} {"level":"info","ts":"2026-07-16T21:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d8955fef09146a6bfae0f7d8b0a907da85ce4a002c72e1af5f794298d40ac0e"}