--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-18T02:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"} {"level":"info","ts":"2026-07-18T02:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:33:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:33:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"} {"level":"info","ts":"2026-07-18T02:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:33:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:33:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"} {"level":"info","ts":"2026-07-18T02:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:33:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:33:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:33:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:33:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec"} {"level":"info","ts":"2026-07-18T02:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:33:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:33:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"} {"level":"info","ts":"2026-07-18T02:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:33:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:33:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"} {"level":"debug","ts":"2026-07-18T02:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:33:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:33:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"} {"level":"info","ts":"2026-07-18T02:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec"} {"level":"info","ts":"2026-07-18T02:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"} {"level":"info","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7d69244-1005-4cdc-a387-19868b305cff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:45052","PortSpecifier":{"PortValue":45052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a7d69244-1005-4cdc-a387-19868b305cff","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7d69244-1005-4cdc-a387-19868b305cff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:45052","PortSpecifier":{"PortValue":45052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342025,"nanos":342472843},"http":{"id":"a7d69244-1005-4cdc-a387-19868b305cff","method":"POST","headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a7d69244-1005-4cdc-a387-19868b305cff","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a7d69244-1005-4cdc-a387-19868b305cff","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"]}} {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a7d69244-1005-4cdc-a387-19868b305cff","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7d69244-1005-4cdc-a387-19868b305cff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7d69244-1005-4cdc-a387-19868b305cff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7d69244-1005-4cdc-a387-19868b305cff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4b0cf7/auth-test-model-4b0cf7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4b0cf7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a7d69244-1005-4cdc-a387-19868b305cff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7d69244-1005-4cdc-a387-19868b305cff","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7d69244-1005-4cdc-a387-19868b305cff","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7d69244-1005-4cdc-a387-19868b305cff","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7d69244-1005-4cdc-a387-19868b305cff","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5ed8174-cc46-445e-9b26-7af9ac72d276","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:60408","PortSpecifier":{"PortValue":60408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5ed8174-cc46-445e-9b26-7af9ac72d276","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5ed8174-cc46-445e-9b26-7af9ac72d276","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:60408","PortSpecifier":{"PortValue":60408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342025,"nanos":388246138},"http":{"id":"b5ed8174-cc46-445e-9b26-7af9ac72d276","method":"POST","headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b5ed8174-cc46-445e-9b26-7af9ac72d276","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5ed8174-cc46-445e-9b26-7af9ac72d276","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"]}} {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5ed8174-cc46-445e-9b26-7af9ac72d276","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5ed8174-cc46-445e-9b26-7af9ac72d276","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5ed8174-cc46-445e-9b26-7af9ac72d276","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5ed8174-cc46-445e-9b26-7af9ac72d276","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-124cd9/auth-test-model-124cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-124cd9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b5ed8174-cc46-445e-9b26-7af9ac72d276","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5ed8174-cc46-445e-9b26-7af9ac72d276","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5ed8174-cc46-445e-9b26-7af9ac72d276","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5ed8174-cc46-445e-9b26-7af9ac72d276","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5ed8174-cc46-445e-9b26-7af9ac72d276","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7028045c-8231-4f77-a0e0-b7c789115b22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:45058","PortSpecifier":{"PortValue":45058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7028045c-8231-4f77-a0e0-b7c789115b22","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7028045c-8231-4f77-a0e0-b7c789115b22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:45058","PortSpecifier":{"PortValue":45058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342025,"nanos":431547085},"http":{"id":"7028045c-8231-4f77-a0e0-b7c789115b22","method":"GET","headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7028045c-8231-4f77-a0e0-b7c789115b22","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15dUjHyB4IZYgmj0W_Bv2650EBoPdSqQvKjh1HMTPzVJEVdaIAzfVPDxtC66a"} {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7028045c-8231-4f77-a0e0-b7c789115b22","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15dUjHyB4IZYgmj0W_Bv2650EBoPdSqQvKjh1HMTPzVJEVdaIAzfVPDxtC66a\"}"} {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7028045c-8231-4f77-a0e0-b7c789115b22","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8161b69c-f17d-4b70-b5c8-53d2d1e0c0f6","keyName":"e2e-auth-iso-a-f9de4c","subscription":"e2e-auth-iso-276c6b","tenant":"e2e-shared-a-4b0cf7","userId":"8161b69c-f17d-4b70-b5c8-53d2d1e0c0f6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7028045c-8231-4f77-a0e0-b7c789115b22","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7028045c-8231-4f77-a0e0-b7c789115b22","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7028045c-8231-4f77-a0e0-b7c789115b22","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7028045c-8231-4f77-a0e0-b7c789115b22","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4b0cf7/auth-test-model-4b0cf7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4b0cf7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7028045c-8231-4f77-a0e0-b7c789115b22","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7028045c-8231-4f77-a0e0-b7c789115b22","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-276c6b"} {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7028045c-8231-4f77-a0e0-b7c789115b22","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7028045c-8231-4f77-a0e0-b7c789115b22","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7028045c-8231-4f77-a0e0-b7c789115b22","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7028045c-8231-4f77-a0e0-b7c789115b22","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec"} {"level":"info","ts":"2026-07-18T02:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13"} {"level":"info","ts":"2026-07-18T02:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"} {"level":"info","ts":"2026-07-18T02:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"} {"level":"info","ts":"2026-07-18T02:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"} {"level":"info","ts":"2026-07-18T02:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"} {"level":"info","ts":"2026-07-18T02:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"} {"level":"info","ts":"2026-07-18T02:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"} {"level":"info","ts":"2026-07-18T02:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"info","ts":"2026-07-18T02:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"} {"level":"info","ts":"2026-07-18T02:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"} {"level":"info","ts":"2026-07-18T02:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"debug","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:33:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:33:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:33:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:33:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"} {"level":"info","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:33:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:33:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"} {"level":"debug","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"} {"level":"debug","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:33:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:33:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:33:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:33:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"} {"level":"debug","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"} {"level":"debug","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:33:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:33:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:33:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:33:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"} {"level":"debug","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"} {"level":"debug","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:33:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:33:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:33:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:33:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"info","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:33:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:33:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"info","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"debug","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:33:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:33:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"} {"level":"info","ts":"2026-07-18T02:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13"} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13"} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13"} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"} {"level":"error","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec"} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec"} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"} {"level":"error","ts":"2026-07-18T02:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9172093f-5bfc-440d-a202-c2c3d4c9a95b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48622","PortSpecifier":{"PortValue":48622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9172093f-5bfc-440d-a202-c2c3d4c9a95b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9172093f-5bfc-440d-a202-c2c3d4c9a95b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48622","PortSpecifier":{"PortValue":48622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342042,"nanos":541355931},"http":{"id":"9172093f-5bfc-440d-a202-c2c3d4c9a95b","method":"POST","headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9172093f-5bfc-440d-a202-c2c3d4c9a95b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9172093f-5bfc-440d-a202-c2c3d4c9a95b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"]}} {"level":"debug","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9172093f-5bfc-440d-a202-c2c3d4c9a95b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9172093f-5bfc-440d-a202-c2c3d4c9a95b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9172093f-5bfc-440d-a202-c2c3d4c9a95b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9172093f-5bfc-440d-a202-c2c3d4c9a95b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4b0cf7/auth-test-model-4b0cf7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4b0cf7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9172093f-5bfc-440d-a202-c2c3d4c9a95b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9172093f-5bfc-440d-a202-c2c3d4c9a95b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9172093f-5bfc-440d-a202-c2c3d4c9a95b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9172093f-5bfc-440d-a202-c2c3d4c9a95b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9172093f-5bfc-440d-a202-c2c3d4c9a95b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"652a4587-1ee7-4fb1-916a-d4a28d9febf9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:60604","PortSpecifier":{"PortValue":60604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"652a4587-1ee7-4fb1-916a-d4a28d9febf9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"652a4587-1ee7-4fb1-916a-d4a28d9febf9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:60604","PortSpecifier":{"PortValue":60604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342042,"nanos":579671770},"http":{"id":"652a4587-1ee7-4fb1-916a-d4a28d9febf9","method":"POST","headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"652a4587-1ee7-4fb1-916a-d4a28d9febf9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"652a4587-1ee7-4fb1-916a-d4a28d9febf9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"]}} {"level":"debug","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"652a4587-1ee7-4fb1-916a-d4a28d9febf9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"652a4587-1ee7-4fb1-916a-d4a28d9febf9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"652a4587-1ee7-4fb1-916a-d4a28d9febf9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"652a4587-1ee7-4fb1-916a-d4a28d9febf9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-124cd9/auth-test-model-124cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-124cd9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"652a4587-1ee7-4fb1-916a-d4a28d9febf9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"652a4587-1ee7-4fb1-916a-d4a28d9febf9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"652a4587-1ee7-4fb1-916a-d4a28d9febf9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"652a4587-1ee7-4fb1-916a-d4a28d9febf9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"652a4587-1ee7-4fb1-916a-d4a28d9febf9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9630f0f-977f-424e-b13e-0c20b3935409","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:60608","PortSpecifier":{"PortValue":60608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a9630f0f-977f-424e-b13e-0c20b3935409","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9630f0f-977f-424e-b13e-0c20b3935409","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:60608","PortSpecifier":{"PortValue":60608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342042,"nanos":626343432},"http":{"id":"a9630f0f-977f-424e-b13e-0c20b3935409","method":"GET","headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a9630f0f-977f-424e-b13e-0c20b3935409","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1T63OC9JZ2GvhVqwb_EdiHg0FaICmR7AzB9SFzJzeR9Qjjxw16hKGVqsqA8CQ"} {"level":"debug","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a9630f0f-977f-424e-b13e-0c20b3935409","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-124cd9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1T63OC9JZ2GvhVqwb_EdiHg0FaICmR7AzB9SFzJzeR9Qjjxw16hKGVqsqA8CQ\"}"} {"level":"debug","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a9630f0f-977f-424e-b13e-0c20b3935409","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-124cd9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a9630f0f-977f-424e-b13e-0c20b3935409","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9630f0f-977f-424e-b13e-0c20b3935409","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"a9630f0f-977f-424e-b13e-0c20b3935409","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9630f0f-977f-424e-b13e-0c20b3935409","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-18T02:34:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9630f0f-977f-424e-b13e-0c20b3935409","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-18T02:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"} {"level":"info","ts":"2026-07-18T02:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13"} {"level":"info","ts":"2026-07-18T02:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"} {"level":"info","ts":"2026-07-18T02:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"} {"level":"info","ts":"2026-07-18T02:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"info","ts":"2026-07-18T02:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"} {"level":"info","ts":"2026-07-18T02:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"} {"level":"info","ts":"2026-07-18T02:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec"} {"level":"info","ts":"2026-07-18T02:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"} {"level":"info","ts":"2026-07-18T02:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"} {"level":"info","ts":"2026-07-18T02:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"info","ts":"2026-07-18T02:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"} {"level":"debug","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13"} {"level":"debug","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13"} {"level":"debug","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13"} {"level":"info","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"info","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13"} {"level":"info","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"info","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13"} {"level":"debug","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"debug","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"debug","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13"} {"level":"info","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"debug","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec"} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec"} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"} {"level":"debug","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"} {"level":"info","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b5daee9-0962-4f84-92c6-c22e15dc8543","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:53574","PortSpecifier":{"PortValue":53574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b5daee9-0962-4f84-92c6-c22e15dc8543","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b5daee9-0962-4f84-92c6-c22e15dc8543","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:53574","PortSpecifier":{"PortValue":53574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342059,"nanos":740485348},"http":{"id":"5b5daee9-0962-4f84-92c6-c22e15dc8543","method":"POST","headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5b5daee9-0962-4f84-92c6-c22e15dc8543","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b5daee9-0962-4f84-92c6-c22e15dc8543","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"]}} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b5daee9-0962-4f84-92c6-c22e15dc8543","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b5daee9-0962-4f84-92c6-c22e15dc8543","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b5daee9-0962-4f84-92c6-c22e15dc8543","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b5daee9-0962-4f84-92c6-c22e15dc8543","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4b0cf7/auth-test-model-4b0cf7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4b0cf7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5b5daee9-0962-4f84-92c6-c22e15dc8543","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b5daee9-0962-4f84-92c6-c22e15dc8543","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b5daee9-0962-4f84-92c6-c22e15dc8543","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b5daee9-0962-4f84-92c6-c22e15dc8543","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b5daee9-0962-4f84-92c6-c22e15dc8543","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aef0183c-4144-4053-b2d7-5d110ef583a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:50382","PortSpecifier":{"PortValue":50382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aef0183c-4144-4053-b2d7-5d110ef583a8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aef0183c-4144-4053-b2d7-5d110ef583a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:50382","PortSpecifier":{"PortValue":50382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342059,"nanos":779098224},"http":{"id":"aef0183c-4144-4053-b2d7-5d110ef583a8","method":"POST","headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aef0183c-4144-4053-b2d7-5d110ef583a8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aef0183c-4144-4053-b2d7-5d110ef583a8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"]}} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aef0183c-4144-4053-b2d7-5d110ef583a8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aef0183c-4144-4053-b2d7-5d110ef583a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aef0183c-4144-4053-b2d7-5d110ef583a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aef0183c-4144-4053-b2d7-5d110ef583a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-124cd9/auth-test-model-124cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-124cd9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aef0183c-4144-4053-b2d7-5d110ef583a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aef0183c-4144-4053-b2d7-5d110ef583a8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aef0183c-4144-4053-b2d7-5d110ef583a8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aef0183c-4144-4053-b2d7-5d110ef583a8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aef0183c-4144-4053-b2d7-5d110ef583a8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a27a87a-e4c0-499f-9d1b-c252a30f71ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:53590","PortSpecifier":{"PortValue":53590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a27a87a-e4c0-499f-9d1b-c252a30f71ac","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a27a87a-e4c0-499f-9d1b-c252a30f71ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:53590","PortSpecifier":{"PortValue":53590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342059,"nanos":820309760},"http":{"id":"8a27a87a-e4c0-499f-9d1b-c252a30f71ac","method":"POST","headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8a27a87a-e4c0-499f-9d1b-c252a30f71ac","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a27a87a-e4c0-499f-9d1b-c252a30f71ac","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"]}} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a27a87a-e4c0-499f-9d1b-c252a30f71ac","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a27a87a-e4c0-499f-9d1b-c252a30f71ac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a27a87a-e4c0-499f-9d1b-c252a30f71ac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a27a87a-e4c0-499f-9d1b-c252a30f71ac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4b0cf7/auth-test-model-4b0cf7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4b0cf7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8a27a87a-e4c0-499f-9d1b-c252a30f71ac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a27a87a-e4c0-499f-9d1b-c252a30f71ac","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a27a87a-e4c0-499f-9d1b-c252a30f71ac","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a27a87a-e4c0-499f-9d1b-c252a30f71ac","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a27a87a-e4c0-499f-9d1b-c252a30f71ac","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d9af3df-6eec-4b82-99c9-8684c665e9a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:50384","PortSpecifier":{"PortValue":50384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9d9af3df-6eec-4b82-99c9-8684c665e9a9","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d9af3df-6eec-4b82-99c9-8684c665e9a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:50384","PortSpecifier":{"PortValue":50384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342059,"nanos":855271781},"http":{"id":"9d9af3df-6eec-4b82-99c9-8684c665e9a9","method":"POST","headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9d9af3df-6eec-4b82-99c9-8684c665e9a9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9d9af3df-6eec-4b82-99c9-8684c665e9a9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"]}} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9d9af3df-6eec-4b82-99c9-8684c665e9a9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d9af3df-6eec-4b82-99c9-8684c665e9a9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d9af3df-6eec-4b82-99c9-8684c665e9a9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d9af3df-6eec-4b82-99c9-8684c665e9a9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-124cd9/auth-test-model-124cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-124cd9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9d9af3df-6eec-4b82-99c9-8684c665e9a9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d9af3df-6eec-4b82-99c9-8684c665e9a9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d9af3df-6eec-4b82-99c9-8684c665e9a9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d9af3df-6eec-4b82-99c9-8684c665e9a9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:34:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d9af3df-6eec-4b82-99c9-8684c665e9a9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:34:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"} {"level":"info","ts":"2026-07-18T02:34:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"} {"level":"info","ts":"2026-07-18T02:34:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13"} {"level":"info","ts":"2026-07-18T02:34:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"info","ts":"2026-07-18T02:34:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"} {"level":"info","ts":"2026-07-18T02:34:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"info","ts":"2026-07-18T02:34:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"} {"level":"info","ts":"2026-07-18T02:34:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"} {"level":"info","ts":"2026-07-18T02:34:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec"} {"level":"info","ts":"2026-07-18T02:34:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"} {"level":"info","ts":"2026-07-18T02:34:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"} {"level":"info","ts":"2026-07-18T02:34:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"} {"level":"debug","ts":"2026-07-18T02:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"} {"level":"debug","ts":"2026-07-18T02:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"} {"level":"debug","ts":"2026-07-18T02:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13"} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13"} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13"} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec"} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec"} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec"} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec"} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec"} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"} {"level":"error","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"811dded6-6396-4939-9b97-fabb0519fff3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:57300","PortSpecifier":{"PortValue":57300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"811dded6-6396-4939-9b97-fabb0519fff3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"811dded6-6396-4939-9b97-fabb0519fff3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:57300","PortSpecifier":{"PortValue":57300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342074,"nanos":863329729},"http":{"id":"811dded6-6396-4939-9b97-fabb0519fff3","method":"POST","headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"811dded6-6396-4939-9b97-fabb0519fff3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"811dded6-6396-4939-9b97-fabb0519fff3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"]}} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"811dded6-6396-4939-9b97-fabb0519fff3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"811dded6-6396-4939-9b97-fabb0519fff3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"811dded6-6396-4939-9b97-fabb0519fff3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"811dded6-6396-4939-9b97-fabb0519fff3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4b0cf7/auth-test-model-4b0cf7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4b0cf7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"811dded6-6396-4939-9b97-fabb0519fff3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"811dded6-6396-4939-9b97-fabb0519fff3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"811dded6-6396-4939-9b97-fabb0519fff3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"811dded6-6396-4939-9b97-fabb0519fff3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"811dded6-6396-4939-9b97-fabb0519fff3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07528e78-1f33-4e63-8f5b-0b6357b5ef2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:41802","PortSpecifier":{"PortValue":41802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07528e78-1f33-4e63-8f5b-0b6357b5ef2b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07528e78-1f33-4e63-8f5b-0b6357b5ef2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:41802","PortSpecifier":{"PortValue":41802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342074,"nanos":902607210},"http":{"id":"07528e78-1f33-4e63-8f5b-0b6357b5ef2b","method":"POST","headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"07528e78-1f33-4e63-8f5b-0b6357b5ef2b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07528e78-1f33-4e63-8f5b-0b6357b5ef2b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"]}} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07528e78-1f33-4e63-8f5b-0b6357b5ef2b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07528e78-1f33-4e63-8f5b-0b6357b5ef2b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07528e78-1f33-4e63-8f5b-0b6357b5ef2b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07528e78-1f33-4e63-8f5b-0b6357b5ef2b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-124cd9/auth-test-model-124cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-124cd9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"07528e78-1f33-4e63-8f5b-0b6357b5ef2b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07528e78-1f33-4e63-8f5b-0b6357b5ef2b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07528e78-1f33-4e63-8f5b-0b6357b5ef2b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07528e78-1f33-4e63-8f5b-0b6357b5ef2b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07528e78-1f33-4e63-8f5b-0b6357b5ef2b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18a39d84-c37f-475b-b9ac-57b37acd0505","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:41816","PortSpecifier":{"PortValue":41816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"18a39d84-c37f-475b-b9ac-57b37acd0505","method":"GET","path":"/maas-api/v1/api-keys/9b7690ca-c27a-4044-aa77-58e10f9e7930","host":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18a39d84-c37f-475b-b9ac-57b37acd0505","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:41816","PortSpecifier":{"PortValue":41816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342074,"nanos":944133949},"http":{"id":"18a39d84-c37f-475b-b9ac-57b37acd0505","method":"GET","headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9b7690ca-c27a-4044-aa77-58e10f9e7930",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"18a39d84-c37f-475b-b9ac-57b37acd0505","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"18a39d84-c37f-475b-b9ac-57b37acd0505","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"]}} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"18a39d84-c37f-475b-b9ac-57b37acd0505","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9b7690ca-c27a-4044-aa77-58e10f9e7930",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18a39d84-c37f-475b-b9ac-57b37acd0505","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18a39d84-c37f-475b-b9ac-57b37acd0505","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18a39d84-c37f-475b-b9ac-57b37acd0505","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-124cd9/auth-test-model-124cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-124cd9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"18a39d84-c37f-475b-b9ac-57b37acd0505","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18a39d84-c37f-475b-b9ac-57b37acd0505","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18a39d84-c37f-475b-b9ac-57b37acd0505","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18a39d84-c37f-475b-b9ac-57b37acd0505","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18a39d84-c37f-475b-b9ac-57b37acd0505","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abc5e67f-5bb3-4c59-aa9b-eef1a6c7a8a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:57314","PortSpecifier":{"PortValue":57314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"abc5e67f-5bb3-4c59-aa9b-eef1a6c7a8a5","method":"GET","path":"/maas-api/v1/api-keys/9b7690ca-c27a-4044-aa77-58e10f9e7930","host":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abc5e67f-5bb3-4c59-aa9b-eef1a6c7a8a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:57314","PortSpecifier":{"PortValue":57314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342074,"nanos":982995182},"http":{"id":"abc5e67f-5bb3-4c59-aa9b-eef1a6c7a8a5","method":"GET","headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9b7690ca-c27a-4044-aa77-58e10f9e7930",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"abc5e67f-5bb3-4c59-aa9b-eef1a6c7a8a5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"abc5e67f-5bb3-4c59-aa9b-eef1a6c7a8a5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"]}} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"abc5e67f-5bb3-4c59-aa9b-eef1a6c7a8a5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9b7690ca-c27a-4044-aa77-58e10f9e7930",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abc5e67f-5bb3-4c59-aa9b-eef1a6c7a8a5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abc5e67f-5bb3-4c59-aa9b-eef1a6c7a8a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abc5e67f-5bb3-4c59-aa9b-eef1a6c7a8a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4b0cf7/auth-test-model-4b0cf7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4b0cf7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"abc5e67f-5bb3-4c59-aa9b-eef1a6c7a8a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abc5e67f-5bb3-4c59-aa9b-eef1a6c7a8a5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abc5e67f-5bb3-4c59-aa9b-eef1a6c7a8a5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abc5e67f-5bb3-4c59-aa9b-eef1a6c7a8a5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:34:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abc5e67f-5bb3-4c59-aa9b-eef1a6c7a8a5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"} {"level":"info","ts":"2026-07-18T02:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"} {"level":"info","ts":"2026-07-18T02:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"} {"level":"info","ts":"2026-07-18T02:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"info","ts":"2026-07-18T02:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"} {"level":"info","ts":"2026-07-18T02:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"} {"level":"info","ts":"2026-07-18T02:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec"} {"level":"info","ts":"2026-07-18T02:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"} {"level":"info","ts":"2026-07-18T02:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"info","ts":"2026-07-18T02:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13"} {"level":"info","ts":"2026-07-18T02:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"} {"level":"info","ts":"2026-07-18T02:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"} {"level":"debug","ts":"2026-07-18T02:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"} {"level":"debug","ts":"2026-07-18T02:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"} {"level":"debug","ts":"2026-07-18T02:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13"} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13"} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13"} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"} {"level":"info","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"} {"level":"debug","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"info","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"} {"level":"info","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec"} {"level":"info","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"info","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:34:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:34:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"} {"level":"info","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec"} {"level":"info","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"info","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"} {"level":"info","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:34:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:34:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"} {"level":"error","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"354811b8-6396-4eb7-b849-1fb4b5916c0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:55770","PortSpecifier":{"PortValue":55770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"354811b8-6396-4eb7-b849-1fb4b5916c0c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"354811b8-6396-4eb7-b849-1fb4b5916c0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:55770","PortSpecifier":{"PortValue":55770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342094,"nanos":223098583},"http":{"id":"354811b8-6396-4eb7-b849-1fb4b5916c0c","method":"POST","headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"354811b8-6396-4eb7-b849-1fb4b5916c0c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"354811b8-6396-4eb7-b849-1fb4b5916c0c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"]}} {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"354811b8-6396-4eb7-b849-1fb4b5916c0c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"354811b8-6396-4eb7-b849-1fb4b5916c0c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"354811b8-6396-4eb7-b849-1fb4b5916c0c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"354811b8-6396-4eb7-b849-1fb4b5916c0c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4b0cf7/auth-test-model-4b0cf7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4b0cf7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"354811b8-6396-4eb7-b849-1fb4b5916c0c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"354811b8-6396-4eb7-b849-1fb4b5916c0c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"354811b8-6396-4eb7-b849-1fb4b5916c0c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"354811b8-6396-4eb7-b849-1fb4b5916c0c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"354811b8-6396-4eb7-b849-1fb4b5916c0c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b5de709-eef1-4efa-93f0-a991fb8f73a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:35982","PortSpecifier":{"PortValue":35982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b5de709-eef1-4efa-93f0-a991fb8f73a7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b5de709-eef1-4efa-93f0-a991fb8f73a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:35982","PortSpecifier":{"PortValue":35982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342094,"nanos":257149546},"http":{"id":"5b5de709-eef1-4efa-93f0-a991fb8f73a7","method":"POST","headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5b5de709-eef1-4efa-93f0-a991fb8f73a7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b5de709-eef1-4efa-93f0-a991fb8f73a7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"]}} {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b5de709-eef1-4efa-93f0-a991fb8f73a7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b5de709-eef1-4efa-93f0-a991fb8f73a7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b5de709-eef1-4efa-93f0-a991fb8f73a7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b5de709-eef1-4efa-93f0-a991fb8f73a7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-124cd9/auth-test-model-124cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-124cd9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5b5de709-eef1-4efa-93f0-a991fb8f73a7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b5de709-eef1-4efa-93f0-a991fb8f73a7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b5de709-eef1-4efa-93f0-a991fb8f73a7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b5de709-eef1-4efa-93f0-a991fb8f73a7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b5de709-eef1-4efa-93f0-a991fb8f73a7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efed5fae-e9ea-4200-b7a2-f4f17a791e77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:55772","PortSpecifier":{"PortValue":55772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"efed5fae-e9ea-4200-b7a2-f4f17a791e77","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efed5fae-e9ea-4200-b7a2-f4f17a791e77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:55772","PortSpecifier":{"PortValue":55772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342094,"nanos":296443094},"http":{"id":"efed5fae-e9ea-4200-b7a2-f4f17a791e77","method":"POST","headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"efed5fae-e9ea-4200-b7a2-f4f17a791e77","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NvewrhSWSrKzzG3z_H3ULVRTA0DCCLwoodDD3IOZ8Wyjd1aV39ifHj1azbmM"} {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"efed5fae-e9ea-4200-b7a2-f4f17a791e77","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NvewrhSWSrKzzG3z_H3ULVRTA0DCCLwoodDD3IOZ8Wyjd1aV39ifHj1azbmM\"}"} {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"efed5fae-e9ea-4200-b7a2-f4f17a791e77","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6a87f066-d7f4-4bd7-9213-5339ab419b6c","keyName":"e2e-auth-iso-a-4935cc","subscription":"e2e-auth-iso-5b3d9e","tenant":"e2e-shared-a-4b0cf7","userId":"6a87f066-d7f4-4bd7-9213-5339ab419b6c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"efed5fae-e9ea-4200-b7a2-f4f17a791e77","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efed5fae-e9ea-4200-b7a2-f4f17a791e77","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efed5fae-e9ea-4200-b7a2-f4f17a791e77","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efed5fae-e9ea-4200-b7a2-f4f17a791e77","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4b0cf7/auth-test-model-4b0cf7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4b0cf7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efed5fae-e9ea-4200-b7a2-f4f17a791e77","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"efed5fae-e9ea-4200-b7a2-f4f17a791e77","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efed5fae-e9ea-4200-b7a2-f4f17a791e77","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-5b3d9e"} {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efed5fae-e9ea-4200-b7a2-f4f17a791e77","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efed5fae-e9ea-4200-b7a2-f4f17a791e77","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:34:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efed5fae-e9ea-4200-b7a2-f4f17a791e77","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b101360bf44b733afabb4be190ba2bfa4550e1195867786034f69b9d55dab797"} {"level":"info","ts":"2026-07-18T02:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e"} {"level":"info","ts":"2026-07-18T02:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"} {"level":"info","ts":"2026-07-18T02:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"info","ts":"2026-07-18T02:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/298abe7c3d4ac2e6b1ecdcae179699c8c54be9a8edad5fc68d00091f8fc84b8f"} {"level":"info","ts":"2026-07-18T02:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"} {"level":"info","ts":"2026-07-18T02:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc"} {"level":"info","ts":"2026-07-18T02:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9480b64d566c8586cd2f3888333f755b3ce1a371df22675d6050ff8769699ef3"} {"level":"info","ts":"2026-07-18T02:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f863ed053b42df7f36f3acb76a22b2d73e1b51ca6a50c4cb6bb72c58502ee9b"} {"level":"info","ts":"2026-07-18T02:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b44b5c0c90978b25b5d757c7dd32d61fc51691947b9d06f49518c86ac4f45d7a"} {"level":"info","ts":"2026-07-18T02:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e"} {"level":"info","ts":"2026-07-18T02:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"} {"level":"info","ts":"2026-07-18T02:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"info","ts":"2026-07-18T02:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5703f0cd226e81ed8923a098cfb6487ebfb4410d82ef02d2aaf026b7ec8d035"} {"level":"info","ts":"2026-07-18T02:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81393c78251ceb6c9415db4956a81095f3c2848837d735a4731ae2f0ed5aa49e"} {"level":"info","ts":"2026-07-18T02:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1088a3f3acce859688a53cc5baba8fc05ac6933b19f1822e525ae8e448d9392"} {"level":"info","ts":"2026-07-18T02:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28ea617776420beb77d17bb79f155e65a30431a40b57b2dc8f8de0d75de899ac"} {"level":"info","ts":"2026-07-18T02:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a456b70bb49c5bde6f229c3435418447ed24e1334f9207c4f7d43860780e181"} {"level":"info","ts":"2026-07-18T02:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c48a82845b9e0df745efd3d241ac20dc01bb2e41780ce7fcf51837d81807f63"} {"level":"info","ts":"2026-07-18T02:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f6a941c2392ea37a765b83df423650d3eb1e6d691b0734c77d710e9cb5ef09f"} {"level":"info","ts":"2026-07-18T02:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8902ecc33874b6627ea5416ee9d68a031ba5fd94c9f2146536fb3ab8cc8880ec"} {"level":"info","ts":"2026-07-18T02:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/899989c00e6f89bfbdfdddd10ed8da5d83d090a0c6b36cc4f494ad7a009c6409"} {"level":"info","ts":"2026-07-18T02:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f735427571864fa5dc300eec1a5c455197ebcbd734d7e2fa6aab4dd2e7805d13"} {"level":"info","ts":"2026-07-18T02:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b64c1635cd5d2d031037062efda890283f1dfb344f4f958c9a3666e3d99c4ed"} {"level":"debug","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44"} {"level":"info","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44"} {"level":"info","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44"} {"level":"debug","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44"} {"level":"debug","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44"} {"level":"debug","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44"} {"level":"info","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44"} {"level":"debug","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44"} {"level":"info","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44"} {"level":"debug","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e"} {"level":"debug","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44"} {"level":"error","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e"} {"level":"info","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e"} {"level":"debug","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e"} {"level":"debug","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc"} {"level":"info","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e"} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc"} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e"} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc"} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d"} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc"} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d"} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e"} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc"} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d"} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e"} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d"} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d"} {"level":"error","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d"} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5abf8714291811d893d9323a1dc05242dd73cc05beaa4444236ee2bcf6b0c9a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d"} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5abf8714291811d893d9323a1dc05242dd73cc05beaa4444236ee2bcf6b0c9a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5abf8714291811d893d9323a1dc05242dd73cc05beaa4444236ee2bcf6b0c9a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5abf8714291811d893d9323a1dc05242dd73cc05beaa4444236ee2bcf6b0c9a6"} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5abf8714291811d893d9323a1dc05242dd73cc05beaa4444236ee2bcf6b0c9a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5abf8714291811d893d9323a1dc05242dd73cc05beaa4444236ee2bcf6b0c9a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5abf8714291811d893d9323a1dc05242dd73cc05beaa4444236ee2bcf6b0c9a6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5abf8714291811d893d9323a1dc05242dd73cc05beaa4444236ee2bcf6b0c9a6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5abf8714291811d893d9323a1dc05242dd73cc05beaa4444236ee2bcf6b0c9a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5abf8714291811d893d9323a1dc05242dd73cc05beaa4444236ee2bcf6b0c9a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5abf8714291811d893d9323a1dc05242dd73cc05beaa4444236ee2bcf6b0c9a6"} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5abf8714291811d893d9323a1dc05242dd73cc05beaa4444236ee2bcf6b0c9a6"} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2459a260cddb72d2722cd5483fe12face328234bbd7df5fa436abde1c1efd17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2459a260cddb72d2722cd5483fe12face328234bbd7df5fa436abde1c1efd17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2459a260cddb72d2722cd5483fe12face328234bbd7df5fa436abde1c1efd17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2459a260cddb72d2722cd5483fe12face328234bbd7df5fa436abde1c1efd17"} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2459a260cddb72d2722cd5483fe12face328234bbd7df5fa436abde1c1efd17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5abf8714291811d893d9323a1dc05242dd73cc05beaa4444236ee2bcf6b0c9a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5abf8714291811d893d9323a1dc05242dd73cc05beaa4444236ee2bcf6b0c9a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5abf8714291811d893d9323a1dc05242dd73cc05beaa4444236ee2bcf6b0c9a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2459a260cddb72d2722cd5483fe12face328234bbd7df5fa436abde1c1efd17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5abf8714291811d893d9323a1dc05242dd73cc05beaa4444236ee2bcf6b0c9a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2459a260cddb72d2722cd5483fe12face328234bbd7df5fa436abde1c1efd17"} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5abf8714291811d893d9323a1dc05242dd73cc05beaa4444236ee2bcf6b0c9a6"} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2459a260cddb72d2722cd5483fe12face328234bbd7df5fa436abde1c1efd17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2459a260cddb72d2722cd5483fe12face328234bbd7df5fa436abde1c1efd17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2459a260cddb72d2722cd5483fe12face328234bbd7df5fa436abde1c1efd17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2459a260cddb72d2722cd5483fe12face328234bbd7df5fa436abde1c1efd17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2459a260cddb72d2722cd5483fe12face328234bbd7df5fa436abde1c1efd17"} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a775d313825140c1d6a615634545d6f7a02ec9e5f12543c3c4bae8808d128d2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a775d313825140c1d6a615634545d6f7a02ec9e5f12543c3c4bae8808d128d2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a775d313825140c1d6a615634545d6f7a02ec9e5f12543c3c4bae8808d128d2f"} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a775d313825140c1d6a615634545d6f7a02ec9e5f12543c3c4bae8808d128d2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a775d313825140c1d6a615634545d6f7a02ec9e5f12543c3c4bae8808d128d2f"} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a775d313825140c1d6a615634545d6f7a02ec9e5f12543c3c4bae8808d128d2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a775d313825140c1d6a615634545d6f7a02ec9e5f12543c3c4bae8808d128d2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a775d313825140c1d6a615634545d6f7a02ec9e5f12543c3c4bae8808d128d2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a775d313825140c1d6a615634545d6f7a02ec9e5f12543c3c4bae8808d128d2f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a775d313825140c1d6a615634545d6f7a02ec9e5f12543c3c4bae8808d128d2f"} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"} {"level":"error","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:36:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"167649aa860f6db24fcdabd8841b6831d45174005a7a7b8ea46fd6af2d8b5705","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"167649aa860f6db24fcdabd8841b6831d45174005a7a7b8ea46fd6af2d8b5705","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/167649aa860f6db24fcdabd8841b6831d45174005a7a7b8ea46fd6af2d8b5705"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"167649aa860f6db24fcdabd8841b6831d45174005a7a7b8ea46fd6af2d8b5705","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["167649aa860f6db24fcdabd8841b6831d45174005a7a7b8ea46fd6af2d8b5705"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"167649aa860f6db24fcdabd8841b6831d45174005a7a7b8ea46fd6af2d8b5705","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"167649aa860f6db24fcdabd8841b6831d45174005a7a7b8ea46fd6af2d8b5705","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/167649aa860f6db24fcdabd8841b6831d45174005a7a7b8ea46fd6af2d8b5705"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f574c9bc9b21349635d2b8791b24f3255556f2342db88726169ea4b200ef9337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f574c9bc9b21349635d2b8791b24f3255556f2342db88726169ea4b200ef9337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78a470f26dd6292013f5dce8386c006a75a480fbaf495ccd492bf3c945c33ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f574c9bc9b21349635d2b8791b24f3255556f2342db88726169ea4b200ef9337"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78a470f26dd6292013f5dce8386c006a75a480fbaf495ccd492bf3c945c33ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f574c9bc9b21349635d2b8791b24f3255556f2342db88726169ea4b200ef9337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f574c9bc9b21349635d2b8791b24f3255556f2342db88726169ea4b200ef9337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78a470f26dd6292013f5dce8386c006a75a480fbaf495ccd492bf3c945c33ed5"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f574c9bc9b21349635d2b8791b24f3255556f2342db88726169ea4b200ef9337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78a470f26dd6292013f5dce8386c006a75a480fbaf495ccd492bf3c945c33ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78a470f26dd6292013f5dce8386c006a75a480fbaf495ccd492bf3c945c33ed5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f574c9bc9b21349635d2b8791b24f3255556f2342db88726169ea4b200ef9337"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78a470f26dd6292013f5dce8386c006a75a480fbaf495ccd492bf3c945c33ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b71a058a4c30a0793ba8e59ae8b7cb5de9c1ce34bc2a017b6fa80e04a0db5eba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b71a058a4c30a0793ba8e59ae8b7cb5de9c1ce34bc2a017b6fa80e04a0db5eba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f574c9bc9b21349635d2b8791b24f3255556f2342db88726169ea4b200ef9337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179049fceb4815bceacaf36742f240031706d643edaa831a292b270d3311f435","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b71a058a4c30a0793ba8e59ae8b7cb5de9c1ce34bc2a017b6fa80e04a0db5eba"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179049fceb4815bceacaf36742f240031706d643edaa831a292b270d3311f435","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78a470f26dd6292013f5dce8386c006a75a480fbaf495ccd492bf3c945c33ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78a470f26dd6292013f5dce8386c006a75a480fbaf495ccd492bf3c945c33ed5"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78a470f26dd6292013f5dce8386c006a75a480fbaf495ccd492bf3c945c33ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b71a058a4c30a0793ba8e59ae8b7cb5de9c1ce34bc2a017b6fa80e04a0db5eba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b71a058a4c30a0793ba8e59ae8b7cb5de9c1ce34bc2a017b6fa80e04a0db5eba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b71a058a4c30a0793ba8e59ae8b7cb5de9c1ce34bc2a017b6fa80e04a0db5eba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179049fceb4815bceacaf36742f240031706d643edaa831a292b270d3311f435","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179049fceb4815bceacaf36742f240031706d643edaa831a292b270d3311f435"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179049fceb4815bceacaf36742f240031706d643edaa831a292b270d3311f435","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6aab66b98bc9fa8f71515fb9de69ecbbf8dd7fe3843c9638a2739e78d08fbc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f574c9bc9b21349635d2b8791b24f3255556f2342db88726169ea4b200ef9337"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6aab66b98bc9fa8f71515fb9de69ecbbf8dd7fe3843c9638a2739e78d08fbc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78a470f26dd6292013f5dce8386c006a75a480fbaf495ccd492bf3c945c33ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78a470f26dd6292013f5dce8386c006a75a480fbaf495ccd492bf3c945c33ed5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b71a058a4c30a0793ba8e59ae8b7cb5de9c1ce34bc2a017b6fa80e04a0db5eba"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78a470f26dd6292013f5dce8386c006a75a480fbaf495ccd492bf3c945c33ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66059b7f3b35cb74d66d1de5e2d477ba8692b807afbd6c33582b5d5328ce6885","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6aab66b98bc9fa8f71515fb9de69ecbbf8dd7fe3843c9638a2739e78d08fbc4"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66059b7f3b35cb74d66d1de5e2d477ba8692b807afbd6c33582b5d5328ce6885","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b71a058a4c30a0793ba8e59ae8b7cb5de9c1ce34bc2a017b6fa80e04a0db5eba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179049fceb4815bceacaf36742f240031706d643edaa831a292b270d3311f435","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["179049fceb4815bceacaf36742f240031706d643edaa831a292b270d3311f435"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179049fceb4815bceacaf36742f240031706d643edaa831a292b270d3311f435","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6aab66b98bc9fa8f71515fb9de69ecbbf8dd7fe3843c9638a2739e78d08fbc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6aab66b98bc9fa8f71515fb9de69ecbbf8dd7fe3843c9638a2739e78d08fbc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78a470f26dd6292013f5dce8386c006a75a480fbaf495ccd492bf3c945c33ed5"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6aab66b98bc9fa8f71515fb9de69ecbbf8dd7fe3843c9638a2739e78d08fbc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78a470f26dd6292013f5dce8386c006a75a480fbaf495ccd492bf3c945c33ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66059b7f3b35cb74d66d1de5e2d477ba8692b807afbd6c33582b5d5328ce6885","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66059b7f3b35cb74d66d1de5e2d477ba8692b807afbd6c33582b5d5328ce6885"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66059b7f3b35cb74d66d1de5e2d477ba8692b807afbd6c33582b5d5328ce6885","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d67c8367a4f49b8b18d4f274c0ba03f7312e3bb392afeadba93ac90914e0622","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179049fceb4815bceacaf36742f240031706d643edaa831a292b270d3311f435"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d67c8367a4f49b8b18d4f274c0ba03f7312e3bb392afeadba93ac90914e0622"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d67c8367a4f49b8b18d4f274c0ba03f7312e3bb392afeadba93ac90914e0622","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179049fceb4815bceacaf36742f240031706d643edaa831a292b270d3311f435","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6aab66b98bc9fa8f71515fb9de69ecbbf8dd7fe3843c9638a2739e78d08fbc4"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6aab66b98bc9fa8f71515fb9de69ecbbf8dd7fe3843c9638a2739e78d08fbc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66059b7f3b35cb74d66d1de5e2d477ba8692b807afbd6c33582b5d5328ce6885","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d67c8367a4f49b8b18d4f274c0ba03f7312e3bb392afeadba93ac90914e0622","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d67c8367a4f49b8b18d4f274c0ba03f7312e3bb392afeadba93ac90914e0622"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66059b7f3b35cb74d66d1de5e2d477ba8692b807afbd6c33582b5d5328ce6885"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d67c8367a4f49b8b18d4f274c0ba03f7312e3bb392afeadba93ac90914e0622"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396a8876e3d60241fd6aef1fd5827ddc0f6d27629b88424e9bda425ded5f7786"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d67c8367a4f49b8b18d4f274c0ba03f7312e3bb392afeadba93ac90914e0622","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396a8876e3d60241fd6aef1fd5827ddc0f6d27629b88424e9bda425ded5f7786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["396a8876e3d60241fd6aef1fd5827ddc0f6d27629b88424e9bda425ded5f7786"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/587bde5b00b801a4c85f4810bad242aa5119af2a976bce98ccaa5b95774c5c10"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396a8876e3d60241fd6aef1fd5827ddc0f6d27629b88424e9bda425ded5f7786","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587bde5b00b801a4c85f4810bad242aa5119af2a976bce98ccaa5b95774c5c10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["587bde5b00b801a4c85f4810bad242aa5119af2a976bce98ccaa5b95774c5c10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e9e96165d306a2296d7282b7743d6a38ce7e5f6c200f7aa73f96c28f6f97762"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d67c8367a4f49b8b18d4f274c0ba03f7312e3bb392afeadba93ac90914e0622"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396a8876e3d60241fd6aef1fd5827ddc0f6d27629b88424e9bda425ded5f7786"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"587bde5b00b801a4c85f4810bad242aa5119af2a976bce98ccaa5b95774c5c10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/587bde5b00b801a4c85f4810bad242aa5119af2a976bce98ccaa5b95774c5c10"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e9e96165d306a2296d7282b7743d6a38ce7e5f6c200f7aa73f96c28f6f97762","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e9e96165d306a2296d7282b7743d6a38ce7e5f6c200f7aa73f96c28f6f97762"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e9e96165d306a2296d7282b7743d6a38ce7e5f6c200f7aa73f96c28f6f97762","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66059b7f3b35cb74d66d1de5e2d477ba8692b807afbd6c33582b5d5328ce6885","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66059b7f3b35cb74d66d1de5e2d477ba8692b807afbd6c33582b5d5328ce6885"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e9e96165d306a2296d7282b7743d6a38ce7e5f6c200f7aa73f96c28f6f97762"} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66059b7f3b35cb74d66d1de5e2d477ba8692b807afbd6c33582b5d5328ce6885","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d67c8367a4f49b8b18d4f274c0ba03f7312e3bb392afeadba93ac90914e0622","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"396a8876e3d60241fd6aef1fd5827ddc0f6d27629b88424e9bda425ded5f7786","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"587bde5b00b801a4c85f4810bad242aa5119af2a976bce98ccaa5b95774c5c10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e9e96165d306a2296d7282b7743d6a38ce7e5f6c200f7aa73f96c28f6f97762","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66059b7f3b35cb74d66d1de5e2d477ba8692b807afbd6c33582b5d5328ce6885","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66059b7f3b35cb74d66d1de5e2d477ba8692b807afbd6c33582b5d5328ce6885"} {"level":"info","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33d7e8cd-b333-4a34-b1d8-ec52075e4739","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:41422","PortSpecifier":{"PortValue":41422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33d7e8cd-b333-4a34-b1d8-ec52075e4739","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33d7e8cd-b333-4a34-b1d8-ec52075e4739","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:41422","PortSpecifier":{"PortValue":41422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342173,"nanos":468086040},"http":{"id":"33d7e8cd-b333-4a34-b1d8-ec52075e4739","method":"POST","headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"33d7e8cd-b333-4a34-b1d8-ec52075e4739","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33d7e8cd-b333-4a34-b1d8-ec52075e4739","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"]}} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33d7e8cd-b333-4a34-b1d8-ec52075e4739","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33d7e8cd-b333-4a34-b1d8-ec52075e4739","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33d7e8cd-b333-4a34-b1d8-ec52075e4739","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33d7e8cd-b333-4a34-b1d8-ec52075e4739","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4b0cf7/sub-test-model-4b0cf7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4b0cf7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33d7e8cd-b333-4a34-b1d8-ec52075e4739","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33d7e8cd-b333-4a34-b1d8-ec52075e4739","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33d7e8cd-b333-4a34-b1d8-ec52075e4739","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33d7e8cd-b333-4a34-b1d8-ec52075e4739","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33d7e8cd-b333-4a34-b1d8-ec52075e4739","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a05982cd-23b4-488b-bc27-fcd3fcb4da8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:43514","PortSpecifier":{"PortValue":43514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a05982cd-23b4-488b-bc27-fcd3fcb4da8f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a05982cd-23b4-488b-bc27-fcd3fcb4da8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:43514","PortSpecifier":{"PortValue":43514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342173,"nanos":517974597},"http":{"id":"a05982cd-23b4-488b-bc27-fcd3fcb4da8f","method":"POST","headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a05982cd-23b4-488b-bc27-fcd3fcb4da8f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a05982cd-23b4-488b-bc27-fcd3fcb4da8f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"]}} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a05982cd-23b4-488b-bc27-fcd3fcb4da8f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a05982cd-23b4-488b-bc27-fcd3fcb4da8f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a05982cd-23b4-488b-bc27-fcd3fcb4da8f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a05982cd-23b4-488b-bc27-fcd3fcb4da8f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-124cd9/sub-test-model-124cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-124cd9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a05982cd-23b4-488b-bc27-fcd3fcb4da8f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a05982cd-23b4-488b-bc27-fcd3fcb4da8f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a05982cd-23b4-488b-bc27-fcd3fcb4da8f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a05982cd-23b4-488b-bc27-fcd3fcb4da8f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a05982cd-23b4-488b-bc27-fcd3fcb4da8f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed058c27-ffc0-4918-b68e-b4ba1157911d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:41436","PortSpecifier":{"PortValue":41436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ed058c27-ffc0-4918-b68e-b4ba1157911d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed058c27-ffc0-4918-b68e-b4ba1157911d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:41436","PortSpecifier":{"PortValue":41436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342173,"nanos":558071901},"http":{"id":"ed058c27-ffc0-4918-b68e-b4ba1157911d","method":"GET","headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ed058c27-ffc0-4918-b68e-b4ba1157911d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HwiyhAH2noeDdp86_HYARCapxRluFgp7vvngofRT9v5fUeIhsoTEaBEJughh"} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ed058c27-ffc0-4918-b68e-b4ba1157911d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HwiyhAH2noeDdp86_HYARCapxRluFgp7vvngofRT9v5fUeIhsoTEaBEJughh\"}"} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ed058c27-ffc0-4918-b68e-b4ba1157911d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"625bc294-1d4d-433d-94fa-1aae538178bd","keyName":"e2e-sub-iso-0aa425","subscription":"e2e-a-only-ceff98","tenant":"e2e-shared-a-4b0cf7","userId":"625bc294-1d4d-433d-94fa-1aae538178bd","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ed058c27-ffc0-4918-b68e-b4ba1157911d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed058c27-ffc0-4918-b68e-b4ba1157911d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed058c27-ffc0-4918-b68e-b4ba1157911d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed058c27-ffc0-4918-b68e-b4ba1157911d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4b0cf7/sub-test-model-4b0cf7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4b0cf7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed058c27-ffc0-4918-b68e-b4ba1157911d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-ceff98"} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed058c27-ffc0-4918-b68e-b4ba1157911d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed058c27-ffc0-4918-b68e-b4ba1157911d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ed058c27-ffc0-4918-b68e-b4ba1157911d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed058c27-ffc0-4918-b68e-b4ba1157911d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed058c27-ffc0-4918-b68e-b4ba1157911d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d00f05a-f64e-46a6-b8cc-58ba0fd69f87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:43516","PortSpecifier":{"PortValue":43516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d00f05a-f64e-46a6-b8cc-58ba0fd69f87","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d00f05a-f64e-46a6-b8cc-58ba0fd69f87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:43516","PortSpecifier":{"PortValue":43516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342173,"nanos":600325276},"http":{"id":"7d00f05a-f64e-46a6-b8cc-58ba0fd69f87","method":"GET","headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d00f05a-f64e-46a6-b8cc-58ba0fd69f87","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xxQfVSSuZo7qwyT3_efFdK6TC8L6LhQZ6tW7EHI2aAuUs5Eo5nKspe7jQpCg"} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7d00f05a-f64e-46a6-b8cc-58ba0fd69f87","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-124cd9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xxQfVSSuZo7qwyT3_efFdK6TC8L6LhQZ6tW7EHI2aAuUs5Eo5nKspe7jQpCg\"}"} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7d00f05a-f64e-46a6-b8cc-58ba0fd69f87","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-124cd9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"658deb67-f0bd-44d0-a2c3-323b41f395a5","keyName":"e2e-sub-iso-4be908","subscription":"e2e-b-only-ceff98","tenant":"e2e-shared-b-124cd9","userId":"658deb67-f0bd-44d0-a2c3-323b41f395a5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d00f05a-f64e-46a6-b8cc-58ba0fd69f87","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d00f05a-f64e-46a6-b8cc-58ba0fd69f87","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d00f05a-f64e-46a6-b8cc-58ba0fd69f87","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d00f05a-f64e-46a6-b8cc-58ba0fd69f87","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-124cd9/sub-test-model-124cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-124cd9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7d00f05a-f64e-46a6-b8cc-58ba0fd69f87","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d00f05a-f64e-46a6-b8cc-58ba0fd69f87","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d00f05a-f64e-46a6-b8cc-58ba0fd69f87","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d00f05a-f64e-46a6-b8cc-58ba0fd69f87","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-ceff98"} {"level":"info","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d00f05a-f64e-46a6-b8cc-58ba0fd69f87","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:36:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d00f05a-f64e-46a6-b8cc-58ba0fd69f87","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"725cb175-90c4-4525-af5f-03178952b283","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:45254","PortSpecifier":{"PortValue":45254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"725cb175-90c4-4525-af5f-03178952b283","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"725cb175-90c4-4525-af5f-03178952b283","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:45254","PortSpecifier":{"PortValue":45254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342181,"nanos":465234936},"http":{"id":"725cb175-90c4-4525-af5f-03178952b283","method":"POST","headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"725cb175-90c4-4525-af5f-03178952b283","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"725cb175-90c4-4525-af5f-03178952b283","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"]}} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"725cb175-90c4-4525-af5f-03178952b283","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"725cb175-90c4-4525-af5f-03178952b283","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"725cb175-90c4-4525-af5f-03178952b283","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"725cb175-90c4-4525-af5f-03178952b283","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4b0cf7/sub-test-model-4b0cf7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4b0cf7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"725cb175-90c4-4525-af5f-03178952b283","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"725cb175-90c4-4525-af5f-03178952b283","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"725cb175-90c4-4525-af5f-03178952b283","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"725cb175-90c4-4525-af5f-03178952b283","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"725cb175-90c4-4525-af5f-03178952b283","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a694f31e-d431-4f1d-8600-df2ece6282fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:51702","PortSpecifier":{"PortValue":51702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a694f31e-d431-4f1d-8600-df2ece6282fe","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a694f31e-d431-4f1d-8600-df2ece6282fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:51702","PortSpecifier":{"PortValue":51702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342181,"nanos":507536703},"http":{"id":"a694f31e-d431-4f1d-8600-df2ece6282fe","method":"POST","headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a694f31e-d431-4f1d-8600-df2ece6282fe","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a694f31e-d431-4f1d-8600-df2ece6282fe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"]}} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a694f31e-d431-4f1d-8600-df2ece6282fe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a694f31e-d431-4f1d-8600-df2ece6282fe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a694f31e-d431-4f1d-8600-df2ece6282fe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a694f31e-d431-4f1d-8600-df2ece6282fe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-124cd9/sub-test-model-124cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-124cd9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a694f31e-d431-4f1d-8600-df2ece6282fe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a694f31e-d431-4f1d-8600-df2ece6282fe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a694f31e-d431-4f1d-8600-df2ece6282fe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a694f31e-d431-4f1d-8600-df2ece6282fe","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a694f31e-d431-4f1d-8600-df2ece6282fe","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5dc5327-a2a7-4abb-b588-d7d3e5ea2a08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:45264","PortSpecifier":{"PortValue":45264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e5dc5327-a2a7-4abb-b588-d7d3e5ea2a08","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5dc5327-a2a7-4abb-b588-d7d3e5ea2a08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:45264","PortSpecifier":{"PortValue":45264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342181,"nanos":546418948},"http":{"id":"e5dc5327-a2a7-4abb-b588-d7d3e5ea2a08","method":"POST","headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e5dc5327-a2a7-4abb-b588-d7d3e5ea2a08","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SAUrQlPXiH8egG5V_HaraIAukTIs5S9GSB8g5865WofPTQq7wzkPEMBjTrKI"} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e5dc5327-a2a7-4abb-b588-d7d3e5ea2a08","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SAUrQlPXiH8egG5V_HaraIAukTIs5S9GSB8g5865WofPTQq7wzkPEMBjTrKI\"}"} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e5dc5327-a2a7-4abb-b588-d7d3e5ea2a08","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c22d039d-8f0d-41e6-ba4d-56a6e1f4c484","keyName":"e2e-sub-iso-07e866","subscription":"e2e-shared-sub-9e8742","tenant":"e2e-shared-a-4b0cf7","userId":"c22d039d-8f0d-41e6-ba4d-56a6e1f4c484","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e5dc5327-a2a7-4abb-b588-d7d3e5ea2a08","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5dc5327-a2a7-4abb-b588-d7d3e5ea2a08","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5dc5327-a2a7-4abb-b588-d7d3e5ea2a08","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5dc5327-a2a7-4abb-b588-d7d3e5ea2a08","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4b0cf7/sub-test-model-4b0cf7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4b0cf7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5dc5327-a2a7-4abb-b588-d7d3e5ea2a08","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-9e8742"} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5dc5327-a2a7-4abb-b588-d7d3e5ea2a08","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5dc5327-a2a7-4abb-b588-d7d3e5ea2a08","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e5dc5327-a2a7-4abb-b588-d7d3e5ea2a08","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5dc5327-a2a7-4abb-b588-d7d3e5ea2a08","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5dc5327-a2a7-4abb-b588-d7d3e5ea2a08","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:51714","PortSpecifier":{"PortValue":51714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:51714","PortSpecifier":{"PortValue":51714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342181,"nanos":580469210},"http":{"id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","method":"POST","headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aQgYF15YytjtBBxl_2VKxRWim9jKqkcxkV89wDoIsjlxrw1MUhwQBkSGx6JC"} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-124cd9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1aQgYF15YytjtBBxl_2VKxRWim9jKqkcxkV89wDoIsjlxrw1MUhwQBkSGx6JC\"}"} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-124cd9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"90ebce24-b047-41cf-964e-cf45b4316215","keyName":"e2e-sub-iso-f8956e","subscription":"e2e-shared-sub-9e8742","tenant":"e2e-shared-b-124cd9","userId":"90ebce24-b047-41cf-964e-cf45b4316215","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-124cd9/sub-test-model-124cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-124cd9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-9e8742"} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e9e96165d306a2296d7282b7743d6a38ce7e5f6c200f7aa73f96c28f6f97762"} {"level":"info","ts":"2026-07-18T02:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"info","ts":"2026-07-18T02:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e"} {"level":"info","ts":"2026-07-18T02:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/396a8876e3d60241fd6aef1fd5827ddc0f6d27629b88424e9bda425ded5f7786"} {"level":"info","ts":"2026-07-18T02:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc"} {"level":"info","ts":"2026-07-18T02:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5abf8714291811d893d9323a1dc05242dd73cc05beaa4444236ee2bcf6b0c9a6"} {"level":"info","ts":"2026-07-18T02:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"info","ts":"2026-07-18T02:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/587bde5b00b801a4c85f4810bad242aa5119af2a976bce98ccaa5b95774c5c10"} {"level":"info","ts":"2026-07-18T02:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6aab66b98bc9fa8f71515fb9de69ecbbf8dd7fe3843c9638a2739e78d08fbc4"} {"level":"info","ts":"2026-07-18T02:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d"} {"level":"info","ts":"2026-07-18T02:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78a470f26dd6292013f5dce8386c006a75a480fbaf495ccd492bf3c945c33ed5"} {"level":"info","ts":"2026-07-18T02:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e"} {"level":"info","ts":"2026-07-18T02:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"} {"level":"info","ts":"2026-07-18T02:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a775d313825140c1d6a615634545d6f7a02ec9e5f12543c3c4bae8808d128d2f"} {"level":"info","ts":"2026-07-18T02:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/167649aa860f6db24fcdabd8841b6831d45174005a7a7b8ea46fd6af2d8b5705"} {"level":"info","ts":"2026-07-18T02:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"} {"level":"info","ts":"2026-07-18T02:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2459a260cddb72d2722cd5483fe12face328234bbd7df5fa436abde1c1efd17"} {"level":"info","ts":"2026-07-18T02:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d67c8367a4f49b8b18d4f274c0ba03f7312e3bb392afeadba93ac90914e0622"} {"level":"info","ts":"2026-07-18T02:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b71a058a4c30a0793ba8e59ae8b7cb5de9c1ce34bc2a017b6fa80e04a0db5eba"} {"level":"info","ts":"2026-07-18T02:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f574c9bc9b21349635d2b8791b24f3255556f2342db88726169ea4b200ef9337"} {"level":"info","ts":"2026-07-18T02:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44"} {"level":"info","ts":"2026-07-18T02:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"} {"level":"info","ts":"2026-07-18T02:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/179049fceb4815bceacaf36742f240031706d643edaa831a292b270d3311f435"} {"level":"info","ts":"2026-07-18T02:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66059b7f3b35cb74d66d1de5e2d477ba8692b807afbd6c33582b5d5328ce6885"} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee"} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee"} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee"} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2"} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2"} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee"} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2"} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee"} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe762ef6fb663b088a53f776998e2831567da1c56e075581a10c975019b1bb17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2"} {"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe762ef6fb663b088a53f776998e2831567da1c56e075581a10c975019b1bb17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe762ef6fb663b088a53f776998e2831567da1c56e075581a10c975019b1bb17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee"} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe762ef6fb663b088a53f776998e2831567da1c56e075581a10c975019b1bb17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe762ef6fb663b088a53f776998e2831567da1c56e075581a10c975019b1bb17"} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe762ef6fb663b088a53f776998e2831567da1c56e075581a10c975019b1bb17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe762ef6fb663b088a53f776998e2831567da1c56e075581a10c975019b1bb17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe762ef6fb663b088a53f776998e2831567da1c56e075581a10c975019b1bb17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe762ef6fb663b088a53f776998e2831567da1c56e075581a10c975019b1bb17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe762ef6fb663b088a53f776998e2831567da1c56e075581a10c975019b1bb17"} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e"} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1792d06172cbb1860107b9e5e675729aa2d13dc981f32d69ebc6552e0c1befba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1792d06172cbb1860107b9e5e675729aa2d13dc981f32d69ebc6552e0c1befba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1792d06172cbb1860107b9e5e675729aa2d13dc981f32d69ebc6552e0c1befba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1792d06172cbb1860107b9e5e675729aa2d13dc981f32d69ebc6552e0c1befba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1792d06172cbb1860107b9e5e675729aa2d13dc981f32d69ebc6552e0c1befba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1792d06172cbb1860107b9e5e675729aa2d13dc981f32d69ebc6552e0c1befba"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1792d06172cbb1860107b9e5e675729aa2d13dc981f32d69ebc6552e0c1befba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1792d06172cbb1860107b9e5e675729aa2d13dc981f32d69ebc6552e0c1befba"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b03fd1cc0a292e2384412bfaab07c791c8816727fd4d21c3991d651897509b8c"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1792d06172cbb1860107b9e5e675729aa2d13dc981f32d69ebc6552e0c1befba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1792d06172cbb1860107b9e5e675729aa2d13dc981f32d69ebc6552e0c1befba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1792d06172cbb1860107b9e5e675729aa2d13dc981f32d69ebc6552e0c1befba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b03fd1cc0a292e2384412bfaab07c791c8816727fd4d21c3991d651897509b8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b03fd1cc0a292e2384412bfaab07c791c8816727fd4d21c3991d651897509b8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07c982a76f7a0f2d757590a86d0ce608a49e493ff1b2b00af0e079a1a4142f2"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1792d06172cbb1860107b9e5e675729aa2d13dc981f32d69ebc6552e0c1befba"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b03fd1cc0a292e2384412bfaab07c791c8816727fd4d21c3991d651897509b8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d07c982a76f7a0f2d757590a86d0ce608a49e493ff1b2b00af0e079a1a4142f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d07c982a76f7a0f2d757590a86d0ce608a49e493ff1b2b00af0e079a1a4142f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b03fd1cc0a292e2384412bfaab07c791c8816727fd4d21c3991d651897509b8c"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d07c982a76f7a0f2d757590a86d0ce608a49e493ff1b2b00af0e079a1a4142f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1792d06172cbb1860107b9e5e675729aa2d13dc981f32d69ebc6552e0c1befba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b03fd1cc0a292e2384412bfaab07c791c8816727fd4d21c3991d651897509b8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d07c982a76f7a0f2d757590a86d0ce608a49e493ff1b2b00af0e079a1a4142f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b5e269b3aed1eff15236462689e23cfda4ae05240cdaf34532ae013924e6aeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b5e269b3aed1eff15236462689e23cfda4ae05240cdaf34532ae013924e6aeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07c982a76f7a0f2d757590a86d0ce608a49e493ff1b2b00af0e079a1a4142f2"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38ad785dc98184fb993b52407968e2be8af8b8c0053f45c4cfc3201a2c181df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b5e269b3aed1eff15236462689e23cfda4ae05240cdaf34532ae013924e6aeb"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38ad785dc98184fb993b52407968e2be8af8b8c0053f45c4cfc3201a2c181df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b5e269b3aed1eff15236462689e23cfda4ae05240cdaf34532ae013924e6aeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b5e269b3aed1eff15236462689e23cfda4ae05240cdaf34532ae013924e6aeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b5e269b3aed1eff15236462689e23cfda4ae05240cdaf34532ae013924e6aeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"763b31a2fdb616c6e5b363f5bc03f20f082260046002743be4e8ab64d7519e79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"763b31a2fdb616c6e5b363f5bc03f20f082260046002743be4e8ab64d7519e79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38ad785dc98184fb993b52407968e2be8af8b8c0053f45c4cfc3201a2c181df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38ad785dc98184fb993b52407968e2be8af8b8c0053f45c4cfc3201a2c181df7"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38ad785dc98184fb993b52407968e2be8af8b8c0053f45c4cfc3201a2c181df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b5e269b3aed1eff15236462689e23cfda4ae05240cdaf34532ae013924e6aeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0fe56499f7f8b2527c78be7b92b333abc4bab90a960ecea5f231d5a41519fbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0fe56499f7f8b2527c78be7b92b333abc4bab90a960ecea5f231d5a41519fbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"763b31a2fdb616c6e5b363f5bc03f20f082260046002743be4e8ab64d7519e79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/763b31a2fdb616c6e5b363f5bc03f20f082260046002743be4e8ab64d7519e79"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"763b31a2fdb616c6e5b363f5bc03f20f082260046002743be4e8ab64d7519e79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f646d81c116ad846d4f03c959fdde0fd04717517f113fd3429b503bf8d571cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b5e269b3aed1eff15236462689e23cfda4ae05240cdaf34532ae013924e6aeb"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f646d81c116ad846d4f03c959fdde0fd04717517f113fd3429b503bf8d571cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38ad785dc98184fb993b52407968e2be8af8b8c0053f45c4cfc3201a2c181df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38ad785dc98184fb993b52407968e2be8af8b8c0053f45c4cfc3201a2c181df7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0fe56499f7f8b2527c78be7b92b333abc4bab90a960ecea5f231d5a41519fbc"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38ad785dc98184fb993b52407968e2be8af8b8c0053f45c4cfc3201a2c181df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61126fd052a6b76591e84226ab52f953cea3169b5ba7d0a0cb2c1aa3de4b5a53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61126fd052a6b76591e84226ab52f953cea3169b5ba7d0a0cb2c1aa3de4b5a53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0fe56499f7f8b2527c78be7b92b333abc4bab90a960ecea5f231d5a41519fbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0fe56499f7f8b2527c78be7b92b333abc4bab90a960ecea5f231d5a41519fbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f646d81c116ad846d4f03c959fdde0fd04717517f113fd3429b503bf8d571cd"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0fe56499f7f8b2527c78be7b92b333abc4bab90a960ecea5f231d5a41519fbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"763b31a2fdb616c6e5b363f5bc03f20f082260046002743be4e8ab64d7519e79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["763b31a2fdb616c6e5b363f5bc03f20f082260046002743be4e8ab64d7519e79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38ad785dc98184fb993b52407968e2be8af8b8c0053f45c4cfc3201a2c181df7"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"763b31a2fdb616c6e5b363f5bc03f20f082260046002743be4e8ab64d7519e79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f646d81c116ad846d4f03c959fdde0fd04717517f113fd3429b503bf8d571cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f646d81c116ad846d4f03c959fdde0fd04717517f113fd3429b503bf8d571cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61126fd052a6b76591e84226ab52f953cea3169b5ba7d0a0cb2c1aa3de4b5a53"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/763b31a2fdb616c6e5b363f5bc03f20f082260046002743be4e8ab64d7519e79"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f646d81c116ad846d4f03c959fdde0fd04717517f113fd3429b503bf8d571cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38ad785dc98184fb993b52407968e2be8af8b8c0053f45c4cfc3201a2c181df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61126fd052a6b76591e84226ab52f953cea3169b5ba7d0a0cb2c1aa3de4b5a53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61126fd052a6b76591e84226ab52f953cea3169b5ba7d0a0cb2c1aa3de4b5a53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0fe56499f7f8b2527c78be7b92b333abc4bab90a960ecea5f231d5a41519fbc"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61126fd052a6b76591e84226ab52f953cea3169b5ba7d0a0cb2c1aa3de4b5a53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/953845b4e838102ef509804f0712d5efcb45c254f0afb33f068081ce9fb4e858"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f646d81c116ad846d4f03c959fdde0fd04717517f113fd3429b503bf8d571cd"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0fe56499f7f8b2527c78be7b92b333abc4bab90a960ecea5f231d5a41519fbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"953845b4e838102ef509804f0712d5efcb45c254f0afb33f068081ce9fb4e858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["953845b4e838102ef509804f0712d5efcb45c254f0afb33f068081ce9fb4e858"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/094d28976e2b065f81911e4dec66c3191dbd99017ab52266ec643592fb7c1c76"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61126fd052a6b76591e84226ab52f953cea3169b5ba7d0a0cb2c1aa3de4b5a53"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"953845b4e838102ef509804f0712d5efcb45c254f0afb33f068081ce9fb4e858","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"763b31a2fdb616c6e5b363f5bc03f20f082260046002743be4e8ab64d7519e79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f646d81c116ad846d4f03c959fdde0fd04717517f113fd3429b503bf8d571cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c79124b7f65c8a450056112315383c11b7827cd8840b44d87e59f600fa459e87"} {"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"} {"level":"info","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc"} {"level":"info","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"094d28976e2b065f81911e4dec66c3191dbd99017ab52266ec643592fb7c1c76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["094d28976e2b065f81911e4dec66c3191dbd99017ab52266ec643592fb7c1c76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/953845b4e838102ef509804f0712d5efcb45c254f0afb33f068081ce9fb4e858"} {"level":"info","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"} {"level":"info","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"094d28976e2b065f81911e4dec66c3191dbd99017ab52266ec643592fb7c1c76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61126fd052a6b76591e84226ab52f953cea3169b5ba7d0a0cb2c1aa3de4b5a53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c79124b7f65c8a450056112315383c11b7827cd8840b44d87e59f600fa459e87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c79124b7f65c8a450056112315383c11b7827cd8840b44d87e59f600fa459e87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/094d28976e2b065f81911e4dec66c3191dbd99017ab52266ec643592fb7c1c76"} {"level":"info","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c79124b7f65c8a450056112315383c11b7827cd8840b44d87e59f600fa459e87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c79124b7f65c8a450056112315383c11b7827cd8840b44d87e59f600fa459e87"} {"level":"info","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"953845b4e838102ef509804f0712d5efcb45c254f0afb33f068081ce9fb4e858","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"094d28976e2b065f81911e4dec66c3191dbd99017ab52266ec643592fb7c1c76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c79124b7f65c8a450056112315383c11b7827cd8840b44d87e59f600fa459e87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"} {"level":"info","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19a31323-d74f-49c7-939d-318526e818ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59440","PortSpecifier":{"PortValue":59440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"19a31323-d74f-49c7-939d-318526e818ab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19a31323-d74f-49c7-939d-318526e818ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59440","PortSpecifier":{"PortValue":59440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342247,"nanos":159288328},"http":{"id":"19a31323-d74f-49c7-939d-318526e818ab","method":"POST","headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"19a31323-d74f-49c7-939d-318526e818ab","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"19a31323-d74f-49c7-939d-318526e818ab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"]}} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"19a31323-d74f-49c7-939d-318526e818ab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19a31323-d74f-49c7-939d-318526e818ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19a31323-d74f-49c7-939d-318526e818ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19a31323-d74f-49c7-939d-318526e818ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4b0cf7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"19a31323-d74f-49c7-939d-318526e818ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19a31323-d74f-49c7-939d-318526e818ab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19a31323-d74f-49c7-939d-318526e818ab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19a31323-d74f-49c7-939d-318526e818ab","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19a31323-d74f-49c7-939d-318526e818ab","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ce16c6f-6358-409b-bbb7-91b2825a03e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:58750","PortSpecifier":{"PortValue":58750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ce16c6f-6358-409b-bbb7-91b2825a03e1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ce16c6f-6358-409b-bbb7-91b2825a03e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:58750","PortSpecifier":{"PortValue":58750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342247,"nanos":204141047},"http":{"id":"8ce16c6f-6358-409b-bbb7-91b2825a03e1","method":"POST","headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8ce16c6f-6358-409b-bbb7-91b2825a03e1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ce16c6f-6358-409b-bbb7-91b2825a03e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"]}} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ce16c6f-6358-409b-bbb7-91b2825a03e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ce16c6f-6358-409b-bbb7-91b2825a03e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ce16c6f-6358-409b-bbb7-91b2825a03e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ce16c6f-6358-409b-bbb7-91b2825a03e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-124cd9/rate-test-model-124cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-124cd9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8ce16c6f-6358-409b-bbb7-91b2825a03e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ce16c6f-6358-409b-bbb7-91b2825a03e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ce16c6f-6358-409b-bbb7-91b2825a03e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ce16c6f-6358-409b-bbb7-91b2825a03e1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ce16c6f-6358-409b-bbb7-91b2825a03e1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59446","PortSpecifier":{"PortValue":59446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","method":"POST","path":"/ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7/v1/completions","host":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59446","PortSpecifier":{"PortValue":59446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342247,"nanos":263540895},"http":{"id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","method":"POST","headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-IEtK1qZjQ3PeFaxx_QJ1ITeo5X0T06xLzdCskOIGVllmD6Fn1DPcUmShIg1E"} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-IEtK1qZjQ3PeFaxx_QJ1ITeo5X0T06xLzdCskOIGVllmD6Fn1DPcUmShIg1E\"}"} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"247c3ac9-ace6-46da-a651-fd4d3805c1b1","keyName":"e2e-rate-a-81f8d0","subscription":"e2e-rate-iso-a-81f8d0","tenant":"e2e-shared-a-4b0cf7","userId":"247c3ac9-ace6-46da-a651-fd4d3805c1b1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7\",\"requestedSubscription\":\"e2e-rate-iso-a-81f8d0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4b0cf7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-81f8d0","namespace":"ai-tenant-e2e-shared-a-4b0cf7","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4b0cf7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-81f8d0"} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"247c3ac9-ace6-46da-a651-fd4d3805c1b1","keyName":"e2e-rate-a-81f8d0","selected_subscription":"e2e-rate-iso-a-81f8d0","selected_subscription_key":"ai-tenant-e2e-shared-a-4b0cf7/e2e-rate-iso-a-81f8d0@ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4b0cf7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-81f8d0","namespace":"ai-tenant-e2e-shared-a-4b0cf7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59460","PortSpecifier":{"PortValue":59460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","method":"POST","path":"/ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7/v1/completions","host":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59460","PortSpecifier":{"PortValue":59460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342248,"nanos":344547905},"http":{"id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","method":"POST","headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-IEtK1qZjQ3PeFaxx_QJ1ITeo5X0T06xLzdCskOIGVllmD6Fn1DPcUmShIg1E"} {"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-IEtK1qZjQ3PeFaxx_QJ1ITeo5X0T06xLzdCskOIGVllmD6Fn1DPcUmShIg1E\"}"} {"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"247c3ac9-ace6-46da-a651-fd4d3805c1b1","keyName":"e2e-rate-a-81f8d0","subscription":"e2e-rate-iso-a-81f8d0","tenant":"e2e-shared-a-4b0cf7","userId":"247c3ac9-ace6-46da-a651-fd4d3805c1b1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7\",\"requestedSubscription\":\"e2e-rate-iso-a-81f8d0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4b0cf7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-81f8d0","namespace":"ai-tenant-e2e-shared-a-4b0cf7","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4b0cf7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-81f8d0"} {"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"247c3ac9-ace6-46da-a651-fd4d3805c1b1","keyName":"e2e-rate-a-81f8d0","selected_subscription":"e2e-rate-iso-a-81f8d0","selected_subscription_key":"ai-tenant-e2e-shared-a-4b0cf7/e2e-rate-iso-a-81f8d0@ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4b0cf7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-81f8d0","namespace":"ai-tenant-e2e-shared-a-4b0cf7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59472","PortSpecifier":{"PortValue":59472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","method":"POST","path":"/ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7/v1/completions","host":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59472","PortSpecifier":{"PortValue":59472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342249,"nanos":413434836},"http":{"id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","method":"POST","headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-IEtK1qZjQ3PeFaxx_QJ1ITeo5X0T06xLzdCskOIGVllmD6Fn1DPcUmShIg1E"} {"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-IEtK1qZjQ3PeFaxx_QJ1ITeo5X0T06xLzdCskOIGVllmD6Fn1DPcUmShIg1E\"}"} {"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"247c3ac9-ace6-46da-a651-fd4d3805c1b1","keyName":"e2e-rate-a-81f8d0","subscription":"e2e-rate-iso-a-81f8d0","tenant":"e2e-shared-a-4b0cf7","userId":"247c3ac9-ace6-46da-a651-fd4d3805c1b1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7\",\"requestedSubscription\":\"e2e-rate-iso-a-81f8d0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4b0cf7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-81f8d0","namespace":"ai-tenant-e2e-shared-a-4b0cf7","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4b0cf7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-81f8d0"} {"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"247c3ac9-ace6-46da-a651-fd4d3805c1b1","keyName":"e2e-rate-a-81f8d0","selected_subscription":"e2e-rate-iso-a-81f8d0","selected_subscription_key":"ai-tenant-e2e-shared-a-4b0cf7/e2e-rate-iso-a-81f8d0@ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4b0cf7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-81f8d0","namespace":"ai-tenant-e2e-shared-a-4b0cf7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2473c2ee-b767-4213-97b5-c720d13a81b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:57748","PortSpecifier":{"PortValue":57748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2473c2ee-b767-4213-97b5-c720d13a81b7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2473c2ee-b767-4213-97b5-c720d13a81b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:57748","PortSpecifier":{"PortValue":57748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342260,"nanos":258005962},"http":{"id":"2473c2ee-b767-4213-97b5-c720d13a81b7","method":"POST","headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2473c2ee-b767-4213-97b5-c720d13a81b7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2473c2ee-b767-4213-97b5-c720d13a81b7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"]}} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2473c2ee-b767-4213-97b5-c720d13a81b7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2473c2ee-b767-4213-97b5-c720d13a81b7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2473c2ee-b767-4213-97b5-c720d13a81b7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2473c2ee-b767-4213-97b5-c720d13a81b7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4b0cf7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2473c2ee-b767-4213-97b5-c720d13a81b7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2473c2ee-b767-4213-97b5-c720d13a81b7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2473c2ee-b767-4213-97b5-c720d13a81b7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2473c2ee-b767-4213-97b5-c720d13a81b7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2473c2ee-b767-4213-97b5-c720d13a81b7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36752d1d-7c94-4a06-9975-f34107ce6728","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36058","PortSpecifier":{"PortValue":36058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"36752d1d-7c94-4a06-9975-f34107ce6728","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36752d1d-7c94-4a06-9975-f34107ce6728","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36058","PortSpecifier":{"PortValue":36058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342260,"nanos":299839018},"http":{"id":"36752d1d-7c94-4a06-9975-f34107ce6728","method":"POST","headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"36752d1d-7c94-4a06-9975-f34107ce6728","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"36752d1d-7c94-4a06-9975-f34107ce6728","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"]}} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"36752d1d-7c94-4a06-9975-f34107ce6728","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36752d1d-7c94-4a06-9975-f34107ce6728","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36752d1d-7c94-4a06-9975-f34107ce6728","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36752d1d-7c94-4a06-9975-f34107ce6728","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-124cd9/rate-test-model-124cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-124cd9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"36752d1d-7c94-4a06-9975-f34107ce6728","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36752d1d-7c94-4a06-9975-f34107ce6728","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36752d1d-7c94-4a06-9975-f34107ce6728","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36752d1d-7c94-4a06-9975-f34107ce6728","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36752d1d-7c94-4a06-9975-f34107ce6728","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:57758","PortSpecifier":{"PortValue":57758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79e79a5b-cf61-4f24-9309-98e68f27e870","method":"POST","path":"/ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7/v1/completions","host":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:57758","PortSpecifier":{"PortValue":57758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342260,"nanos":339965155},"http":{"id":"79e79a5b-cf61-4f24-9309-98e68f27e870","method":"POST","headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-dvDgiSgwyBzARvex_wAAAnhsxJK9oURN2TBHBSWSAfSbDFkfH6xs73w3DIG6"} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-dvDgiSgwyBzARvex_wAAAnhsxJK9oURN2TBHBSWSAfSbDFkfH6xs73w3DIG6\"}"} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"82020eca-9d0d-42f8-b843-ab0bb6e12784","keyName":"e2e-rate-a-018172","subscription":"e2e-rate-iso-a-018172","tenant":"e2e-shared-a-4b0cf7","userId":"82020eca-9d0d-42f8-b843-ab0bb6e12784","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7\",\"requestedSubscription\":\"e2e-rate-iso-a-018172\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4b0cf7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-018172","namespace":"ai-tenant-e2e-shared-a-4b0cf7","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4b0cf7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-018172"} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"82020eca-9d0d-42f8-b843-ab0bb6e12784","keyName":"e2e-rate-a-018172","selected_subscription":"e2e-rate-iso-a-018172","selected_subscription_key":"ai-tenant-e2e-shared-a-4b0cf7/e2e-rate-iso-a-018172@ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4b0cf7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-018172","namespace":"ai-tenant-e2e-shared-a-4b0cf7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:57770","PortSpecifier":{"PortValue":57770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","method":"POST","path":"/ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7/v1/completions","host":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:57770","PortSpecifier":{"PortValue":57770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342261,"nanos":383361412},"http":{"id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","method":"POST","headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-dvDgiSgwyBzARvex_wAAAnhsxJK9oURN2TBHBSWSAfSbDFkfH6xs73w3DIG6"} {"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-dvDgiSgwyBzARvex_wAAAnhsxJK9oURN2TBHBSWSAfSbDFkfH6xs73w3DIG6\"}"} {"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"82020eca-9d0d-42f8-b843-ab0bb6e12784","keyName":"e2e-rate-a-018172","subscription":"e2e-rate-iso-a-018172","tenant":"e2e-shared-a-4b0cf7","userId":"82020eca-9d0d-42f8-b843-ab0bb6e12784","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7\",\"requestedSubscription\":\"e2e-rate-iso-a-018172\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4b0cf7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-018172","namespace":"ai-tenant-e2e-shared-a-4b0cf7","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4b0cf7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-018172"} {"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"82020eca-9d0d-42f8-b843-ab0bb6e12784","keyName":"e2e-rate-a-018172","selected_subscription":"e2e-rate-iso-a-018172","selected_subscription_key":"ai-tenant-e2e-shared-a-4b0cf7/e2e-rate-iso-a-018172@ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4b0cf7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-018172","namespace":"ai-tenant-e2e-shared-a-4b0cf7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:57778","PortSpecifier":{"PortValue":57778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","method":"POST","path":"/ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7/v1/completions","host":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:57778","PortSpecifier":{"PortValue":57778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342262,"nanos":425203351},"http":{"id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","method":"POST","headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-dvDgiSgwyBzARvex_wAAAnhsxJK9oURN2TBHBSWSAfSbDFkfH6xs73w3DIG6"} {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-dvDgiSgwyBzARvex_wAAAnhsxJK9oURN2TBHBSWSAfSbDFkfH6xs73w3DIG6\"}"} {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"82020eca-9d0d-42f8-b843-ab0bb6e12784","keyName":"e2e-rate-a-018172","subscription":"e2e-rate-iso-a-018172","tenant":"e2e-shared-a-4b0cf7","userId":"82020eca-9d0d-42f8-b843-ab0bb6e12784","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7\",\"requestedSubscription\":\"e2e-rate-iso-a-018172\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4b0cf7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-018172","namespace":"ai-tenant-e2e-shared-a-4b0cf7","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4b0cf7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-018172"} {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"82020eca-9d0d-42f8-b843-ab0bb6e12784","keyName":"e2e-rate-a-018172","selected_subscription":"e2e-rate-iso-a-018172","selected_subscription_key":"ai-tenant-e2e-shared-a-4b0cf7/e2e-rate-iso-a-018172@ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4b0cf7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-018172","namespace":"ai-tenant-e2e-shared-a-4b0cf7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36064","PortSpecifier":{"PortValue":36064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6e5b24d2-070a-45e2-912e-a50a230338b4","method":"POST","path":"/ai-tenant-e2e-shared-b-124cd9/rate-test-model-124cd9/v1/completions","host":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36064","PortSpecifier":{"PortValue":36064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342262,"nanos":464642585},"http":{"id":"6e5b24d2-070a-45e2-912e-a50a230338b4","method":"POST","headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-124cd9/rate-test-model-124cd9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3jRpnYgzh4vldbqE_4XZe48IXrSDlbRrnHmyvpLLASDGIxiNv6d4TrI0zbtZ"} {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-124cd9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3jRpnYgzh4vldbqE_4XZe48IXrSDlbRrnHmyvpLLASDGIxiNv6d4TrI0zbtZ\"}"} {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-124cd9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f02c72b4-164d-4c16-8a5d-18a2d7c42058","keyName":"e2e-rate-b-018172","subscription":"e2e-rate-iso-b-018172","tenant":"e2e-shared-b-124cd9","userId":"f02c72b4-164d-4c16-8a5d-18a2d7c42058","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-124cd9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-124cd9/rate-test-model-124cd9\",\"requestedSubscription\":\"e2e-rate-iso-b-018172\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-124cd9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-124cd9","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-018172","namespace":"ai-tenant-e2e-shared-b-124cd9","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-124cd9/rate-test-model-124cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-124cd9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-018172"} {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f02c72b4-164d-4c16-8a5d-18a2d7c42058","keyName":"e2e-rate-b-018172","selected_subscription":"e2e-rate-iso-b-018172","selected_subscription_key":"ai-tenant-e2e-shared-b-124cd9/e2e-rate-iso-b-018172@ai-tenant-e2e-shared-b-124cd9/rate-test-model-124cd9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-124cd9","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-018172","namespace":"ai-tenant-e2e-shared-b-124cd9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T02:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0fe56499f7f8b2527c78be7b92b333abc4bab90a960ecea5f231d5a41519fbc"} {"level":"info","ts":"2026-07-18T02:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"} {"level":"info","ts":"2026-07-18T02:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18"} {"level":"info","ts":"2026-07-18T02:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b5e269b3aed1eff15236462689e23cfda4ae05240cdaf34532ae013924e6aeb"} {"level":"info","ts":"2026-07-18T02:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61126fd052a6b76591e84226ab52f953cea3169b5ba7d0a0cb2c1aa3de4b5a53"} {"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b03fd1cc0a292e2384412bfaab07c791c8816727fd4d21c3991d651897509b8c"} {"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f646d81c116ad846d4f03c959fdde0fd04717517f113fd3429b503bf8d571cd"} {"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/763b31a2fdb616c6e5b363f5bc03f20f082260046002743be4e8ab64d7519e79"} {"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee"} {"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d07c982a76f7a0f2d757590a86d0ce608a49e493ff1b2b00af0e079a1a4142f2"} {"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"} {"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"} {"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc"} {"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c79124b7f65c8a450056112315383c11b7827cd8840b44d87e59f600fa459e87"} {"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"} {"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1792d06172cbb1860107b9e5e675729aa2d13dc981f32d69ebc6552e0c1befba"} {"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e"} {"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/094d28976e2b065f81911e4dec66c3191dbd99017ab52266ec643592fb7c1c76"} {"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/953845b4e838102ef509804f0712d5efcb45c254f0afb33f068081ce9fb4e858"} {"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"} {"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38ad785dc98184fb993b52407968e2be8af8b8c0053f45c4cfc3201a2c181df7"} {"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe762ef6fb663b088a53f776998e2831567da1c56e075581a10c975019b1bb17"} {"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2"} {"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e"}