--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-20T18:34:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70b06524-da9c-467b-b17c-a2c155423fbc","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-20T18:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889"} {"level":"info","ts":"2026-07-20T18:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7"} {"level":"info","ts":"2026-07-20T18:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f"} {"level":"info","ts":"2026-07-20T18:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3"} {"level":"info","ts":"2026-07-20T18:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae"} {"level":"info","ts":"2026-07-20T18:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"} {"level":"info","ts":"2026-07-20T18:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610"} {"level":"info","ts":"2026-07-20T18:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"} {"level":"info","ts":"2026-07-20T18:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85"} {"level":"info","ts":"2026-07-20T18:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece"} {"level":"info","ts":"2026-07-20T18:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"info","ts":"2026-07-20T18:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad"} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad"} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad"} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad"} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3"} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3"} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3"} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f"} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f"} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f"} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f"} {"level":"info","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610"} {"level":"info","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610"} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f"} {"level":"info","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610"} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610"} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610"} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece"} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece"} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece"} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece"} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85"} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85"} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85"} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889"} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889"} {"level":"error","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae"} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889"} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae"} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7"} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7"} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7"} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"debug","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"debug","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"debug","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"debug","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"debug","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"info","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"debug","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"debug","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"info","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"info","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"debug","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"debug","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"debug","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"info","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eee5a9d1-e096-4f84-9931-66c06eeaa565","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59468","PortSpecifier":{"PortValue":59468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eee5a9d1-e096-4f84-9931-66c06eeaa565","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eee5a9d1-e096-4f84-9931-66c06eeaa565","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59468","PortSpecifier":{"PortValue":59468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572509,"nanos":196745224},"http":{"id":"eee5a9d1-e096-4f84-9931-66c06eeaa565","method":"POST","headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eee5a9d1-e096-4f84-9931-66c06eeaa565","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eee5a9d1-e096-4f84-9931-66c06eeaa565","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"]}} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eee5a9d1-e096-4f84-9931-66c06eeaa565","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eee5a9d1-e096-4f84-9931-66c06eeaa565","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eee5a9d1-e096-4f84-9931-66c06eeaa565","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eee5a9d1-e096-4f84-9931-66c06eeaa565","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daa21b/auth-test-model-daa21b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daa21b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eee5a9d1-e096-4f84-9931-66c06eeaa565","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eee5a9d1-e096-4f84-9931-66c06eeaa565","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eee5a9d1-e096-4f84-9931-66c06eeaa565","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eee5a9d1-e096-4f84-9931-66c06eeaa565","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eee5a9d1-e096-4f84-9931-66c06eeaa565","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1de1644a-6d47-48d1-a49e-e073d5019a29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58554","PortSpecifier":{"PortValue":58554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1de1644a-6d47-48d1-a49e-e073d5019a29","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1de1644a-6d47-48d1-a49e-e073d5019a29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58554","PortSpecifier":{"PortValue":58554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572509,"nanos":239232670},"http":{"id":"1de1644a-6d47-48d1-a49e-e073d5019a29","method":"POST","headers":{":authority":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1de1644a-6d47-48d1-a49e-e073d5019a29","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1de1644a-6d47-48d1-a49e-e073d5019a29","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"]}} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1de1644a-6d47-48d1-a49e-e073d5019a29","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1de1644a-6d47-48d1-a49e-e073d5019a29","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1de1644a-6d47-48d1-a49e-e073d5019a29","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1de1644a-6d47-48d1-a49e-e073d5019a29","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d56278/auth-test-model-d56278\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d56278/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1de1644a-6d47-48d1-a49e-e073d5019a29","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1de1644a-6d47-48d1-a49e-e073d5019a29","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1de1644a-6d47-48d1-a49e-e073d5019a29","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1de1644a-6d47-48d1-a49e-e073d5019a29","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1de1644a-6d47-48d1-a49e-e073d5019a29","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9344096d-b5c1-4d89-8b4c-b8923afda342","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59474","PortSpecifier":{"PortValue":59474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9344096d-b5c1-4d89-8b4c-b8923afda342","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9344096d-b5c1-4d89-8b4c-b8923afda342","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59474","PortSpecifier":{"PortValue":59474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572509,"nanos":285662913},"http":{"id":"9344096d-b5c1-4d89-8b4c-b8923afda342","method":"POST","headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9344096d-b5c1-4d89-8b4c-b8923afda342","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9344096d-b5c1-4d89-8b4c-b8923afda342","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"]}} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9344096d-b5c1-4d89-8b4c-b8923afda342","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9344096d-b5c1-4d89-8b4c-b8923afda342","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9344096d-b5c1-4d89-8b4c-b8923afda342","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9344096d-b5c1-4d89-8b4c-b8923afda342","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daa21b/auth-test-model-daa21b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daa21b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9344096d-b5c1-4d89-8b4c-b8923afda342","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9344096d-b5c1-4d89-8b4c-b8923afda342","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9344096d-b5c1-4d89-8b4c-b8923afda342","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9344096d-b5c1-4d89-8b4c-b8923afda342","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9344096d-b5c1-4d89-8b4c-b8923afda342","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7a62313-b225-4e14-bfbc-57eaeef0afdf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58558","PortSpecifier":{"PortValue":58558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7a62313-b225-4e14-bfbc-57eaeef0afdf","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7a62313-b225-4e14-bfbc-57eaeef0afdf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58558","PortSpecifier":{"PortValue":58558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572509,"nanos":325921241},"http":{"id":"f7a62313-b225-4e14-bfbc-57eaeef0afdf","method":"POST","headers":{":authority":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f7a62313-b225-4e14-bfbc-57eaeef0afdf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7a62313-b225-4e14-bfbc-57eaeef0afdf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"]}} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7a62313-b225-4e14-bfbc-57eaeef0afdf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7a62313-b225-4e14-bfbc-57eaeef0afdf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7a62313-b225-4e14-bfbc-57eaeef0afdf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7a62313-b225-4e14-bfbc-57eaeef0afdf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d56278/auth-test-model-d56278\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d56278/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f7a62313-b225-4e14-bfbc-57eaeef0afdf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7a62313-b225-4e14-bfbc-57eaeef0afdf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7a62313-b225-4e14-bfbc-57eaeef0afdf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7a62313-b225-4e14-bfbc-57eaeef0afdf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:35:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7a62313-b225-4e14-bfbc-57eaeef0afdf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:35:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae"} {"level":"info","ts":"2026-07-20T18:35:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610"} {"level":"info","ts":"2026-07-20T18:35:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f"} {"level":"info","ts":"2026-07-20T18:35:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7"} {"level":"info","ts":"2026-07-20T18:35:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3"} {"level":"info","ts":"2026-07-20T18:35:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889"} {"level":"info","ts":"2026-07-20T18:35:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece"} {"level":"info","ts":"2026-07-20T18:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85"} {"level":"info","ts":"2026-07-20T18:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"} {"level":"info","ts":"2026-07-20T18:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"} {"level":"info","ts":"2026-07-20T18:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad"} {"level":"info","ts":"2026-07-20T18:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"debug","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad"} {"level":"info","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad"} {"level":"error","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad"} {"level":"debug","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad"} {"level":"debug","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85"} {"level":"debug","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85"} {"level":"debug","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85"} {"level":"debug","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"} {"level":"debug","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"} {"level":"debug","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7"} {"level":"info","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7"} {"level":"info","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7"} {"level":"info","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"} {"level":"error","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889"} {"level":"error","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"} {"level":"error","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889"} {"level":"error","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889"} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610"} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f"} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610"} {"level":"error","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f"} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f"} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610"} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae"} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f"} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889"} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610"} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3"} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae"} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece"} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3"} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece"} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece"} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece"} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece"} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece"} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece"} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece"} {"level":"info","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26b1e9b0-4a14-4b5d-acce-3ca58b4f0bcf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55328","PortSpecifier":{"PortValue":55328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"26b1e9b0-4a14-4b5d-acce-3ca58b4f0bcf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26b1e9b0-4a14-4b5d-acce-3ca58b4f0bcf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55328","PortSpecifier":{"PortValue":55328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572528,"nanos":856070558},"http":{"id":"26b1e9b0-4a14-4b5d-acce-3ca58b4f0bcf","method":"POST","headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"26b1e9b0-4a14-4b5d-acce-3ca58b4f0bcf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"26b1e9b0-4a14-4b5d-acce-3ca58b4f0bcf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"]}} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"26b1e9b0-4a14-4b5d-acce-3ca58b4f0bcf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26b1e9b0-4a14-4b5d-acce-3ca58b4f0bcf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26b1e9b0-4a14-4b5d-acce-3ca58b4f0bcf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26b1e9b0-4a14-4b5d-acce-3ca58b4f0bcf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daa21b/auth-test-model-daa21b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daa21b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"26b1e9b0-4a14-4b5d-acce-3ca58b4f0bcf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26b1e9b0-4a14-4b5d-acce-3ca58b4f0bcf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26b1e9b0-4a14-4b5d-acce-3ca58b4f0bcf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26b1e9b0-4a14-4b5d-acce-3ca58b4f0bcf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26b1e9b0-4a14-4b5d-acce-3ca58b4f0bcf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"590e31ca-14ad-46eb-b894-417dfc50d34d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54534","PortSpecifier":{"PortValue":54534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"590e31ca-14ad-46eb-b894-417dfc50d34d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"590e31ca-14ad-46eb-b894-417dfc50d34d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54534","PortSpecifier":{"PortValue":54534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572528,"nanos":899076526},"http":{"id":"590e31ca-14ad-46eb-b894-417dfc50d34d","method":"POST","headers":{":authority":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"590e31ca-14ad-46eb-b894-417dfc50d34d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"590e31ca-14ad-46eb-b894-417dfc50d34d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"]}} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"590e31ca-14ad-46eb-b894-417dfc50d34d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"590e31ca-14ad-46eb-b894-417dfc50d34d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"590e31ca-14ad-46eb-b894-417dfc50d34d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"590e31ca-14ad-46eb-b894-417dfc50d34d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d56278/auth-test-model-d56278\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d56278/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"590e31ca-14ad-46eb-b894-417dfc50d34d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"590e31ca-14ad-46eb-b894-417dfc50d34d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"590e31ca-14ad-46eb-b894-417dfc50d34d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"590e31ca-14ad-46eb-b894-417dfc50d34d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"590e31ca-14ad-46eb-b894-417dfc50d34d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d46a1c12-3b2a-438c-a0f6-f35214c29695","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54550","PortSpecifier":{"PortValue":54550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d46a1c12-3b2a-438c-a0f6-f35214c29695","method":"GET","path":"/maas-api/v1/api-keys/82bf98c1-8ec8-4f7b-bcb1-662c4c0585f7","host":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d46a1c12-3b2a-438c-a0f6-f35214c29695","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54550","PortSpecifier":{"PortValue":54550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572528,"nanos":939886918},"http":{"id":"d46a1c12-3b2a-438c-a0f6-f35214c29695","method":"GET","headers":{":authority":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/82bf98c1-8ec8-4f7b-bcb1-662c4c0585f7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d46a1c12-3b2a-438c-a0f6-f35214c29695","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d46a1c12-3b2a-438c-a0f6-f35214c29695","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"]}} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d46a1c12-3b2a-438c-a0f6-f35214c29695","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/82bf98c1-8ec8-4f7b-bcb1-662c4c0585f7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d46a1c12-3b2a-438c-a0f6-f35214c29695","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d46a1c12-3b2a-438c-a0f6-f35214c29695","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d46a1c12-3b2a-438c-a0f6-f35214c29695","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d56278/auth-test-model-d56278\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d56278/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d46a1c12-3b2a-438c-a0f6-f35214c29695","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d46a1c12-3b2a-438c-a0f6-f35214c29695","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d46a1c12-3b2a-438c-a0f6-f35214c29695","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d46a1c12-3b2a-438c-a0f6-f35214c29695","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d46a1c12-3b2a-438c-a0f6-f35214c29695","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b25131a4-5149-4e84-b093-b1efaf9ebcde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55336","PortSpecifier":{"PortValue":55336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b25131a4-5149-4e84-b093-b1efaf9ebcde","method":"GET","path":"/maas-api/v1/api-keys/82bf98c1-8ec8-4f7b-bcb1-662c4c0585f7","host":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b25131a4-5149-4e84-b093-b1efaf9ebcde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55336","PortSpecifier":{"PortValue":55336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572528,"nanos":977618448},"http":{"id":"b25131a4-5149-4e84-b093-b1efaf9ebcde","method":"GET","headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/82bf98c1-8ec8-4f7b-bcb1-662c4c0585f7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b25131a4-5149-4e84-b093-b1efaf9ebcde","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b25131a4-5149-4e84-b093-b1efaf9ebcde","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"]}} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b25131a4-5149-4e84-b093-b1efaf9ebcde","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/82bf98c1-8ec8-4f7b-bcb1-662c4c0585f7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b25131a4-5149-4e84-b093-b1efaf9ebcde","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b25131a4-5149-4e84-b093-b1efaf9ebcde","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b25131a4-5149-4e84-b093-b1efaf9ebcde","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daa21b/auth-test-model-daa21b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daa21b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b25131a4-5149-4e84-b093-b1efaf9ebcde","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b25131a4-5149-4e84-b093-b1efaf9ebcde","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b25131a4-5149-4e84-b093-b1efaf9ebcde","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b25131a4-5149-4e84-b093-b1efaf9ebcde","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b25131a4-5149-4e84-b093-b1efaf9ebcde","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:35:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7"} {"level":"info","ts":"2026-07-20T18:35:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3"} {"level":"info","ts":"2026-07-20T18:35:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"info","ts":"2026-07-20T18:35:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"} {"level":"info","ts":"2026-07-20T18:35:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"} {"level":"info","ts":"2026-07-20T18:35:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610"} {"level":"info","ts":"2026-07-20T18:35:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f"} {"level":"info","ts":"2026-07-20T18:35:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece"} {"level":"info","ts":"2026-07-20T18:35:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889"} {"level":"info","ts":"2026-07-20T18:35:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85"} {"level":"info","ts":"2026-07-20T18:35:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae"} {"level":"info","ts":"2026-07-20T18:35:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad"} {"level":"debug","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"} {"level":"debug","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"} {"level":"debug","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"} {"level":"debug","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"} {"level":"debug","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85"} {"level":"info","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"} {"level":"error","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85"} {"level":"debug","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889"} {"level":"debug","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85"} {"level":"info","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889"} {"level":"info","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889"} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889"} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889"} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610"} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889"} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610"} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889"} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610"} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f"} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece"} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610"} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece"} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f"} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610"} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece"} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3"} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae"} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3"} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad"} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae"} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3"} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7"} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:35:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad"} {"level":"info","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7"} {"level":"debug","ts":"2026-07-20T18:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f7543da-f90b-4310-8370-9c1379066ae6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55776","PortSpecifier":{"PortValue":55776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f7543da-f90b-4310-8370-9c1379066ae6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f7543da-f90b-4310-8370-9c1379066ae6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55776","PortSpecifier":{"PortValue":55776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572544,"nanos":230440587},"http":{"id":"3f7543da-f90b-4310-8370-9c1379066ae6","method":"POST","headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3f7543da-f90b-4310-8370-9c1379066ae6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f7543da-f90b-4310-8370-9c1379066ae6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"]}} {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f7543da-f90b-4310-8370-9c1379066ae6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f7543da-f90b-4310-8370-9c1379066ae6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f7543da-f90b-4310-8370-9c1379066ae6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f7543da-f90b-4310-8370-9c1379066ae6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daa21b/auth-test-model-daa21b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daa21b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3f7543da-f90b-4310-8370-9c1379066ae6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f7543da-f90b-4310-8370-9c1379066ae6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f7543da-f90b-4310-8370-9c1379066ae6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f7543da-f90b-4310-8370-9c1379066ae6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f7543da-f90b-4310-8370-9c1379066ae6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53e30f34-741a-4da6-b4ac-c407bed0dde1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:49646","PortSpecifier":{"PortValue":49646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"53e30f34-741a-4da6-b4ac-c407bed0dde1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53e30f34-741a-4da6-b4ac-c407bed0dde1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:49646","PortSpecifier":{"PortValue":49646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572544,"nanos":269482926},"http":{"id":"53e30f34-741a-4da6-b4ac-c407bed0dde1","method":"POST","headers":{":authority":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"53e30f34-741a-4da6-b4ac-c407bed0dde1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"53e30f34-741a-4da6-b4ac-c407bed0dde1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"]}} {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"53e30f34-741a-4da6-b4ac-c407bed0dde1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53e30f34-741a-4da6-b4ac-c407bed0dde1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53e30f34-741a-4da6-b4ac-c407bed0dde1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53e30f34-741a-4da6-b4ac-c407bed0dde1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d56278/auth-test-model-d56278\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d56278/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"53e30f34-741a-4da6-b4ac-c407bed0dde1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53e30f34-741a-4da6-b4ac-c407bed0dde1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53e30f34-741a-4da6-b4ac-c407bed0dde1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53e30f34-741a-4da6-b4ac-c407bed0dde1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53e30f34-741a-4da6-b4ac-c407bed0dde1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b41f1f5-6b19-426a-ba4d-88ac3683827f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55778","PortSpecifier":{"PortValue":55778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b41f1f5-6b19-426a-ba4d-88ac3683827f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b41f1f5-6b19-426a-ba4d-88ac3683827f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55778","PortSpecifier":{"PortValue":55778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572544,"nanos":318114640},"http":{"id":"2b41f1f5-6b19-426a-ba4d-88ac3683827f","method":"POST","headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b41f1f5-6b19-426a-ba4d-88ac3683827f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O3sloIpV97WK4Bdu_b95sLGrMJ2PCjl0EaIOXjav4Nd9D9JO43E8EYQexmnG"} {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b41f1f5-6b19-426a-ba4d-88ac3683827f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O3sloIpV97WK4Bdu_b95sLGrMJ2PCjl0EaIOXjav4Nd9D9JO43E8EYQexmnG\"}"} {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b41f1f5-6b19-426a-ba4d-88ac3683827f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e5e3795f-8f9e-461a-9f9a-9f04c4dba68f","keyName":"e2e-auth-iso-a-bf4bfa","subscription":"e2e-auth-iso-8e98fc","tenant":"e2e-shared-a-daa21b","userId":"e5e3795f-8f9e-461a-9f9a-9f04c4dba68f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b41f1f5-6b19-426a-ba4d-88ac3683827f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b41f1f5-6b19-426a-ba4d-88ac3683827f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b41f1f5-6b19-426a-ba4d-88ac3683827f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b41f1f5-6b19-426a-ba4d-88ac3683827f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daa21b/auth-test-model-daa21b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daa21b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b41f1f5-6b19-426a-ba4d-88ac3683827f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b41f1f5-6b19-426a-ba4d-88ac3683827f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-8e98fc"} {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2b41f1f5-6b19-426a-ba4d-88ac3683827f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b41f1f5-6b19-426a-ba4d-88ac3683827f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b41f1f5-6b19-426a-ba4d-88ac3683827f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:35:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b41f1f5-6b19-426a-ba4d-88ac3683827f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee84a6c3686ef774c45b26331dafce748ad629fcd2b5ebcb5f166598c31539f0"} {"level":"info","ts":"2026-07-20T18:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"info","ts":"2026-07-20T18:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5d7086d23d694267277144ef1cf45dfb6e86ee0bc65d4b27d2f16e77deeaece"} {"level":"info","ts":"2026-07-20T18:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/113f17a5a66b04ccaf2764920b2a7ecbab06589625ab375cf2757ef93595ebae"} {"level":"info","ts":"2026-07-20T18:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb79024f57e787c440aa5f838b3a5ba209f4d5d03bb76b8ba1f28a40fd7e443c"} {"level":"info","ts":"2026-07-20T18:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5"} {"level":"info","ts":"2026-07-20T18:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"} {"level":"info","ts":"2026-07-20T18:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f97dbafbfdc25afbf3d5c519ceb826399350e36fe48d205299660873eb207f85"} {"level":"info","ts":"2026-07-20T18:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8507f6d98dc244a6cefb7e040274ea88228fec2a825e340d2e2dcdcfcb168a46"} {"level":"info","ts":"2026-07-20T18:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/191c747d1056ba1eff0ef6c0c4ec86669e3785f9f1f4c4f3290a9ac725459610"} {"level":"info","ts":"2026-07-20T18:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb"} {"level":"info","ts":"2026-07-20T18:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7fc45a6e31413bb6064bb961f33a94db1e8c52b59c14ff5ef78fcdfe4fd4daad"} {"level":"info","ts":"2026-07-20T18:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"} {"level":"info","ts":"2026-07-20T18:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09f5c4a813112b1002193e9c81528ef33d20f5c2fe7515969fe92dc6b999f1a7"} {"level":"info","ts":"2026-07-20T18:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c760d9c096e8a2c26242d242a2152061d8ac5aec2b764a1aad92c0a20d939889"} {"level":"info","ts":"2026-07-20T18:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7049c450ae6e57db3d544661a571d71d5d045e8bc90f7e7b12ab00556e88389f"} {"level":"info","ts":"2026-07-20T18:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"} {"level":"info","ts":"2026-07-20T18:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39cd5fed0854ac30c8c4bb562eb62d260a585877f2d4e2f10229f0c036f49113"} {"level":"info","ts":"2026-07-20T18:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3"} {"level":"info","ts":"2026-07-20T18:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/daf1f62b175936b2f7ed8ee72ee9e51482e670217b7a3da58c411735cabcc68f"} {"level":"info","ts":"2026-07-20T18:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c474397d4e5402ca11f229092668cdaa09cbf0fa7217c924ae280a285621a794"} {"level":"info","ts":"2026-07-20T18:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b19e54c54a8b15f05b70415701bbde84cf92f66b81286f228e24ada53e492972"} {"level":"info","ts":"2026-07-20T18:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a76b4b81216038c08d0c5c4862c42a4fa50f0746a93843742d5aad4558d407cc"} {"level":"info","ts":"2026-07-20T18:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0"} {"level":"debug","ts":"2026-07-20T18:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0"} {"level":"info","ts":"2026-07-20T18:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T18:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T18:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0"} {"level":"info","ts":"2026-07-20T18:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0"} {"level":"debug","ts":"2026-07-20T18:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9880dd23f09e2c358e6639506cc4bbafdc5a604951980f3dcd9c7acbe984efc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"} {"level":"info","ts":"2026-07-20T18:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9880dd23f09e2c358e6639506cc4bbafdc5a604951980f3dcd9c7acbe984efc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9880dd23f09e2c358e6639506cc4bbafdc5a604951980f3dcd9c7acbe984efc0"} {"level":"info","ts":"2026-07-20T18:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9880dd23f09e2c358e6639506cc4bbafdc5a604951980f3dcd9c7acbe984efc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9880dd23f09e2c358e6639506cc4bbafdc5a604951980f3dcd9c7acbe984efc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"} {"level":"info","ts":"2026-07-20T18:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9880dd23f09e2c358e6639506cc4bbafdc5a604951980f3dcd9c7acbe984efc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9880dd23f09e2c358e6639506cc4bbafdc5a604951980f3dcd9c7acbe984efc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9880dd23f09e2c358e6639506cc4bbafdc5a604951980f3dcd9c7acbe984efc0"} {"level":"info","ts":"2026-07-20T18:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9880dd23f09e2c358e6639506cc4bbafdc5a604951980f3dcd9c7acbe984efc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9880dd23f09e2c358e6639506cc4bbafdc5a604951980f3dcd9c7acbe984efc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9880dd23f09e2c358e6639506cc4bbafdc5a604951980f3dcd9c7acbe984efc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9880dd23f09e2c358e6639506cc4bbafdc5a604951980f3dcd9c7acbe984efc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9880dd23f09e2c358e6639506cc4bbafdc5a604951980f3dcd9c7acbe984efc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b19e1a9165f7370f246c8cbc76b83b1f550e4fd801356dcb0cf953ebcdc54ceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b19e1a9165f7370f246c8cbc76b83b1f550e4fd801356dcb0cf953ebcdc54ceb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b19e1a9165f7370f246c8cbc76b83b1f550e4fd801356dcb0cf953ebcdc54ceb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b19e1a9165f7370f246c8cbc76b83b1f550e4fd801356dcb0cf953ebcdc54ceb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9880dd23f09e2c358e6639506cc4bbafdc5a604951980f3dcd9c7acbe984efc0"} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b19e1a9165f7370f246c8cbc76b83b1f550e4fd801356dcb0cf953ebcdc54ceb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b19e1a9165f7370f246c8cbc76b83b1f550e4fd801356dcb0cf953ebcdc54ceb"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b19e1a9165f7370f246c8cbc76b83b1f550e4fd801356dcb0cf953ebcdc54ceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b19e1a9165f7370f246c8cbc76b83b1f550e4fd801356dcb0cf953ebcdc54ceb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b19e1a9165f7370f246c8cbc76b83b1f550e4fd801356dcb0cf953ebcdc54ceb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b19e1a9165f7370f246c8cbc76b83b1f550e4fd801356dcb0cf953ebcdc54ceb"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b19e1a9165f7370f246c8cbc76b83b1f550e4fd801356dcb0cf953ebcdc54ceb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd25c9736bb6e78e27c3d3fc239b525f18d061ae6e2d9ac35bc866ac4104173e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd25c9736bb6e78e27c3d3fc239b525f18d061ae6e2d9ac35bc866ac4104173e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd25c9736bb6e78e27c3d3fc239b525f18d061ae6e2d9ac35bc866ac4104173e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd25c9736bb6e78e27c3d3fc239b525f18d061ae6e2d9ac35bc866ac4104173e"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd25c9736bb6e78e27c3d3fc239b525f18d061ae6e2d9ac35bc866ac4104173e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd25c9736bb6e78e27c3d3fc239b525f18d061ae6e2d9ac35bc866ac4104173e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd25c9736bb6e78e27c3d3fc239b525f18d061ae6e2d9ac35bc866ac4104173e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd25c9736bb6e78e27c3d3fc239b525f18d061ae6e2d9ac35bc866ac4104173e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd25c9736bb6e78e27c3d3fc239b525f18d061ae6e2d9ac35bc866ac4104173e"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd25c9736bb6e78e27c3d3fc239b525f18d061ae6e2d9ac35bc866ac4104173e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd25c9736bb6e78e27c3d3fc239b525f18d061ae6e2d9ac35bc866ac4104173e"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f"} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"} {"level":"error","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/766211b1e4a40acdc1a3aac34f87a304a5e04eb4dd7e562ffca260e31317997b"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f"} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"766211b1e4a40acdc1a3aac34f87a304a5e04eb4dd7e562ffca260e31317997b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["766211b1e4a40acdc1a3aac34f87a304a5e04eb4dd7e562ffca260e31317997b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"766211b1e4a40acdc1a3aac34f87a304a5e04eb4dd7e562ffca260e31317997b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5744c77acbd1771212a08cf12932f7b254ca69d6ce901dfbbf6140dc1f017628"} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2005ad14b0cfd7fb15c2f2c85a97455e78650e44e4156e4fda6308837fafb91"} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/766211b1e4a40acdc1a3aac34f87a304a5e04eb4dd7e562ffca260e31317997b"} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d12c7e3452a10ba99055cc6330b5d5699c4d81ebe2d5f214553a5ddd3e30999c"} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e520b3761ecf72b060b4b6237821c739deab442d62686413856a27067fe9c961"} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3f549cc29c1a9348f8828df3cec9589fd52bbea526ba7fac532f6b351178c67"} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5744c77acbd1771212a08cf12932f7b254ca69d6ce901dfbbf6140dc1f017628","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5744c77acbd1771212a08cf12932f7b254ca69d6ce901dfbbf6140dc1f017628"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c88ad846336ce72783011fe8bd3a8fb96b4c6610a50c80cc5c4877091c258a63"} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5744c77acbd1771212a08cf12932f7b254ca69d6ce901dfbbf6140dc1f017628","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2005ad14b0cfd7fb15c2f2c85a97455e78650e44e4156e4fda6308837fafb91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2005ad14b0cfd7fb15c2f2c85a97455e78650e44e4156e4fda6308837fafb91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f"} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bd2701e43e6357e93e6f71afd73759054bb37cf11651cf6dda061f4a0549238"} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2005ad14b0cfd7fb15c2f2c85a97455e78650e44e4156e4fda6308837fafb91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"766211b1e4a40acdc1a3aac34f87a304a5e04eb4dd7e562ffca260e31317997b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d12c7e3452a10ba99055cc6330b5d5699c4d81ebe2d5f214553a5ddd3e30999c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d12c7e3452a10ba99055cc6330b5d5699c4d81ebe2d5f214553a5ddd3e30999c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12b7b22089afea60a850ba66148c80b381f17596a4d9f152566e50379f3c4961"} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5744c77acbd1771212a08cf12932f7b254ca69d6ce901dfbbf6140dc1f017628"} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d12c7e3452a10ba99055cc6330b5d5699c4d81ebe2d5f214553a5ddd3e30999c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e520b3761ecf72b060b4b6237821c739deab442d62686413856a27067fe9c961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e520b3761ecf72b060b4b6237821c739deab442d62686413856a27067fe9c961"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f953bbf31c78ee188505bba38fc32a37388270586f0f4694cb44aea262e65af4"} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e520b3761ecf72b060b4b6237821c739deab442d62686413856a27067fe9c961","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3f549cc29c1a9348f8828df3cec9589fd52bbea526ba7fac532f6b351178c67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3f549cc29c1a9348f8828df3cec9589fd52bbea526ba7fac532f6b351178c67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e4cffed48ccadf132938f5e7d1d0913fb562c89531f17b46c8afd574510f0a6"} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3f549cc29c1a9348f8828df3cec9589fd52bbea526ba7fac532f6b351178c67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c88ad846336ce72783011fe8bd3a8fb96b4c6610a50c80cc5c4877091c258a63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c88ad846336ce72783011fe8bd3a8fb96b4c6610a50c80cc5c4877091c258a63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2005ad14b0cfd7fb15c2f2c85a97455e78650e44e4156e4fda6308837fafb91"} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb"} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c88ad846336ce72783011fe8bd3a8fb96b4c6610a50c80cc5c4877091c258a63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d12c7e3452a10ba99055cc6330b5d5699c4d81ebe2d5f214553a5ddd3e30999c"} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e520b3761ecf72b060b4b6237821c739deab442d62686413856a27067fe9c961"} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bd2701e43e6357e93e6f71afd73759054bb37cf11651cf6dda061f4a0549238","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4bd2701e43e6357e93e6f71afd73759054bb37cf11651cf6dda061f4a0549238"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3f549cc29c1a9348f8828df3cec9589fd52bbea526ba7fac532f6b351178c67"} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c88ad846336ce72783011fe8bd3a8fb96b4c6610a50c80cc5c4877091c258a63"} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bd2701e43e6357e93e6f71afd73759054bb37cf11651cf6dda061f4a0549238","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12b7b22089afea60a850ba66148c80b381f17596a4d9f152566e50379f3c4961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12b7b22089afea60a850ba66148c80b381f17596a4d9f152566e50379f3c4961"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bd2701e43e6357e93e6f71afd73759054bb37cf11651cf6dda061f4a0549238"} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12b7b22089afea60a850ba66148c80b381f17596a4d9f152566e50379f3c4961","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5744c77acbd1771212a08cf12932f7b254ca69d6ce901dfbbf6140dc1f017628","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f953bbf31c78ee188505bba38fc32a37388270586f0f4694cb44aea262e65af4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f953bbf31c78ee188505bba38fc32a37388270586f0f4694cb44aea262e65af4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12b7b22089afea60a850ba66148c80b381f17596a4d9f152566e50379f3c4961"} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f953bbf31c78ee188505bba38fc32a37388270586f0f4694cb44aea262e65af4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e4cffed48ccadf132938f5e7d1d0913fb562c89531f17b46c8afd574510f0a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e4cffed48ccadf132938f5e7d1d0913fb562c89531f17b46c8afd574510f0a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f953bbf31c78ee188505bba38fc32a37388270586f0f4694cb44aea262e65af4"} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e4cffed48ccadf132938f5e7d1d0913fb562c89531f17b46c8afd574510f0a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2005ad14b0cfd7fb15c2f2c85a97455e78650e44e4156e4fda6308837fafb91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e4cffed48ccadf132938f5e7d1d0913fb562c89531f17b46c8afd574510f0a6"} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d12c7e3452a10ba99055cc6330b5d5699c4d81ebe2d5f214553a5ddd3e30999c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e520b3761ecf72b060b4b6237821c739deab442d62686413856a27067fe9c961","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3f549cc29c1a9348f8828df3cec9589fd52bbea526ba7fac532f6b351178c67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c88ad846336ce72783011fe8bd3a8fb96b4c6610a50c80cc5c4877091c258a63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bd2701e43e6357e93e6f71afd73759054bb37cf11651cf6dda061f4a0549238","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12b7b22089afea60a850ba66148c80b381f17596a4d9f152566e50379f3c4961","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f953bbf31c78ee188505bba38fc32a37388270586f0f4694cb44aea262e65af4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e4cffed48ccadf132938f5e7d1d0913fb562c89531f17b46c8afd574510f0a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb"} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb"} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb"} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb"} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb"} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb"} {"level":"info","ts":"2026-07-20T18:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:36:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:36:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb"} {"level":"error","ts":"2026-07-20T18:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T18:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:36:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25459cf0-53ce-47d4-a465-303b9356aaa4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43850","PortSpecifier":{"PortValue":43850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"25459cf0-53ce-47d4-a465-303b9356aaa4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25459cf0-53ce-47d4-a465-303b9356aaa4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43850","PortSpecifier":{"PortValue":43850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572606,"nanos":15804374},"http":{"id":"25459cf0-53ce-47d4-a465-303b9356aaa4","method":"POST","headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"25459cf0-53ce-47d4-a465-303b9356aaa4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"25459cf0-53ce-47d4-a465-303b9356aaa4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"]}} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"25459cf0-53ce-47d4-a465-303b9356aaa4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25459cf0-53ce-47d4-a465-303b9356aaa4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25459cf0-53ce-47d4-a465-303b9356aaa4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25459cf0-53ce-47d4-a465-303b9356aaa4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daa21b/sub-test-model-daa21b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daa21b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"25459cf0-53ce-47d4-a465-303b9356aaa4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25459cf0-53ce-47d4-a465-303b9356aaa4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25459cf0-53ce-47d4-a465-303b9356aaa4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25459cf0-53ce-47d4-a465-303b9356aaa4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25459cf0-53ce-47d4-a465-303b9356aaa4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61f61120-3dbd-4935-9ad9-efcb1679e10d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58242","PortSpecifier":{"PortValue":58242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"61f61120-3dbd-4935-9ad9-efcb1679e10d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61f61120-3dbd-4935-9ad9-efcb1679e10d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58242","PortSpecifier":{"PortValue":58242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572606,"nanos":61841824},"http":{"id":"61f61120-3dbd-4935-9ad9-efcb1679e10d","method":"POST","headers":{":authority":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"61f61120-3dbd-4935-9ad9-efcb1679e10d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"61f61120-3dbd-4935-9ad9-efcb1679e10d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"]}} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"61f61120-3dbd-4935-9ad9-efcb1679e10d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61f61120-3dbd-4935-9ad9-efcb1679e10d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61f61120-3dbd-4935-9ad9-efcb1679e10d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61f61120-3dbd-4935-9ad9-efcb1679e10d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d56278/sub-test-model-d56278\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d56278/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"61f61120-3dbd-4935-9ad9-efcb1679e10d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61f61120-3dbd-4935-9ad9-efcb1679e10d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61f61120-3dbd-4935-9ad9-efcb1679e10d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61f61120-3dbd-4935-9ad9-efcb1679e10d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61f61120-3dbd-4935-9ad9-efcb1679e10d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80ecb98b-ed08-4750-bbcc-f4213fee132f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43852","PortSpecifier":{"PortValue":43852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80ecb98b-ed08-4750-bbcc-f4213fee132f","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80ecb98b-ed08-4750-bbcc-f4213fee132f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43852","PortSpecifier":{"PortValue":43852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572606,"nanos":102593099},"http":{"id":"80ecb98b-ed08-4750-bbcc-f4213fee132f","method":"GET","headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80ecb98b-ed08-4750-bbcc-f4213fee132f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WnjUPbJ5Ghvvtoaj_2hYl6LcPdN2H3MJVy8m8KoHs9drqIDTIosGyfKAwSyT"} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"80ecb98b-ed08-4750-bbcc-f4213fee132f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WnjUPbJ5Ghvvtoaj_2hYl6LcPdN2H3MJVy8m8KoHs9drqIDTIosGyfKAwSyT\"}"} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"80ecb98b-ed08-4750-bbcc-f4213fee132f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b2859644-fd39-490a-a826-6b0c86e0ea26","keyName":"e2e-sub-iso-e66c7f","subscription":"e2e-a-only-e463ae","tenant":"e2e-shared-a-daa21b","userId":"b2859644-fd39-490a-a826-6b0c86e0ea26","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80ecb98b-ed08-4750-bbcc-f4213fee132f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80ecb98b-ed08-4750-bbcc-f4213fee132f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80ecb98b-ed08-4750-bbcc-f4213fee132f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80ecb98b-ed08-4750-bbcc-f4213fee132f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daa21b/sub-test-model-daa21b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daa21b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80ecb98b-ed08-4750-bbcc-f4213fee132f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80ecb98b-ed08-4750-bbcc-f4213fee132f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-e463ae"} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80ecb98b-ed08-4750-bbcc-f4213fee132f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"80ecb98b-ed08-4750-bbcc-f4213fee132f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80ecb98b-ed08-4750-bbcc-f4213fee132f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80ecb98b-ed08-4750-bbcc-f4213fee132f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e4e6e2f-56af-455b-83b4-ac58bc0367da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58244","PortSpecifier":{"PortValue":58244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6e4e6e2f-56af-455b-83b4-ac58bc0367da","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e4e6e2f-56af-455b-83b4-ac58bc0367da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58244","PortSpecifier":{"PortValue":58244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572606,"nanos":150401892},"http":{"id":"6e4e6e2f-56af-455b-83b4-ac58bc0367da","method":"GET","headers":{":authority":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6e4e6e2f-56af-455b-83b4-ac58bc0367da","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PlpuLCDLzDELAZaC_iV8yBTyUQdGzMeEJynVT0TtL48TZLhBlXAv8o1vZNST"} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6e4e6e2f-56af-455b-83b4-ac58bc0367da","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d56278.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PlpuLCDLzDELAZaC_iV8yBTyUQdGzMeEJynVT0TtL48TZLhBlXAv8o1vZNST\"}"} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6e4e6e2f-56af-455b-83b4-ac58bc0367da","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d56278.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a7e45f38-00e8-4d3c-a797-a555781d1fc2","keyName":"e2e-sub-iso-1aacdc","subscription":"e2e-b-only-e463ae","tenant":"e2e-shared-b-d56278","userId":"a7e45f38-00e8-4d3c-a797-a555781d1fc2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6e4e6e2f-56af-455b-83b4-ac58bc0367da","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e4e6e2f-56af-455b-83b4-ac58bc0367da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e4e6e2f-56af-455b-83b4-ac58bc0367da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e4e6e2f-56af-455b-83b4-ac58bc0367da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d56278/sub-test-model-d56278\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d56278/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e4e6e2f-56af-455b-83b4-ac58bc0367da","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6e4e6e2f-56af-455b-83b4-ac58bc0367da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e4e6e2f-56af-455b-83b4-ac58bc0367da","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-e463ae"} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e4e6e2f-56af-455b-83b4-ac58bc0367da","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e4e6e2f-56af-455b-83b4-ac58bc0367da","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:36:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e4e6e2f-56af-455b-83b4-ac58bc0367da","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9880dd23f09e2c358e6639506cc4bbafdc5a604951980f3dcd9c7acbe984efc0"} {"level":"info","ts":"2026-07-20T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3f549cc29c1a9348f8828df3cec9589fd52bbea526ba7fac532f6b351178c67"} {"level":"info","ts":"2026-07-20T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5"} {"level":"info","ts":"2026-07-20T18:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c88ad846336ce72783011fe8bd3a8fb96b4c6610a50c80cc5c4877091c258a63"} {"level":"info","ts":"2026-07-20T18:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd25c9736bb6e78e27c3d3fc239b525f18d061ae6e2d9ac35bc866ac4104173e"} {"level":"info","ts":"2026-07-20T18:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d12c7e3452a10ba99055cc6330b5d5699c4d81ebe2d5f214553a5ddd3e30999c"} {"level":"info","ts":"2026-07-20T18:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0"} {"level":"info","ts":"2026-07-20T18:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb"} {"level":"info","ts":"2026-07-20T18:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f953bbf31c78ee188505bba38fc32a37388270586f0f4694cb44aea262e65af4"} {"level":"info","ts":"2026-07-20T18:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"} {"level":"info","ts":"2026-07-20T18:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/12b7b22089afea60a850ba66148c80b381f17596a4d9f152566e50379f3c4961"} {"level":"info","ts":"2026-07-20T18:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb"} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb"} {"level":"error","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb"} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"} {"level":"error","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb"} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:37:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d12c7e3452a10ba99055cc6330b5d5699c4d81ebe2d5f214553a5ddd3e30999c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d12c7e3452a10ba99055cc6330b5d5699c4d81ebe2d5f214553a5ddd3e30999c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d12c7e3452a10ba99055cc6330b5d5699c4d81ebe2d5f214553a5ddd3e30999c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d12c7e3452a10ba99055cc6330b5d5699c4d81ebe2d5f214553a5ddd3e30999c"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d12c7e3452a10ba99055cc6330b5d5699c4d81ebe2d5f214553a5ddd3e30999c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d12c7e3452a10ba99055cc6330b5d5699c4d81ebe2d5f214553a5ddd3e30999c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d12c7e3452a10ba99055cc6330b5d5699c4d81ebe2d5f214553a5ddd3e30999c"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d12c7e3452a10ba99055cc6330b5d5699c4d81ebe2d5f214553a5ddd3e30999c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d12c7e3452a10ba99055cc6330b5d5699c4d81ebe2d5f214553a5ddd3e30999c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d12c7e3452a10ba99055cc6330b5d5699c4d81ebe2d5f214553a5ddd3e30999c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d12c7e3452a10ba99055cc6330b5d5699c4d81ebe2d5f214553a5ddd3e30999c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d12c7e3452a10ba99055cc6330b5d5699c4d81ebe2d5f214553a5ddd3e30999c"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0"} {"level":"error","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f953bbf31c78ee188505bba38fc32a37388270586f0f4694cb44aea262e65af4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f953bbf31c78ee188505bba38fc32a37388270586f0f4694cb44aea262e65af4"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f953bbf31c78ee188505bba38fc32a37388270586f0f4694cb44aea262e65af4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f953bbf31c78ee188505bba38fc32a37388270586f0f4694cb44aea262e65af4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f953bbf31c78ee188505bba38fc32a37388270586f0f4694cb44aea262e65af4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f953bbf31c78ee188505bba38fc32a37388270586f0f4694cb44aea262e65af4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f953bbf31c78ee188505bba38fc32a37388270586f0f4694cb44aea262e65af4"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f953bbf31c78ee188505bba38fc32a37388270586f0f4694cb44aea262e65af4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12b7b22089afea60a850ba66148c80b381f17596a4d9f152566e50379f3c4961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12b7b22089afea60a850ba66148c80b381f17596a4d9f152566e50379f3c4961","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12b7b22089afea60a850ba66148c80b381f17596a4d9f152566e50379f3c4961","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f953bbf31c78ee188505bba38fc32a37388270586f0f4694cb44aea262e65af4"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12b7b22089afea60a850ba66148c80b381f17596a4d9f152566e50379f3c4961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12b7b22089afea60a850ba66148c80b381f17596a4d9f152566e50379f3c4961"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12b7b22089afea60a850ba66148c80b381f17596a4d9f152566e50379f3c4961","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9880dd23f09e2c358e6639506cc4bbafdc5a604951980f3dcd9c7acbe984efc0"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9880dd23f09e2c358e6639506cc4bbafdc5a604951980f3dcd9c7acbe984efc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9880dd23f09e2c358e6639506cc4bbafdc5a604951980f3dcd9c7acbe984efc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12b7b22089afea60a850ba66148c80b381f17596a4d9f152566e50379f3c4961"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9880dd23f09e2c358e6639506cc4bbafdc5a604951980f3dcd9c7acbe984efc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12b7b22089afea60a850ba66148c80b381f17596a4d9f152566e50379f3c4961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12b7b22089afea60a850ba66148c80b381f17596a4d9f152566e50379f3c4961"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9880dd23f09e2c358e6639506cc4bbafdc5a604951980f3dcd9c7acbe984efc0"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd25c9736bb6e78e27c3d3fc239b525f18d061ae6e2d9ac35bc866ac4104173e"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12b7b22089afea60a850ba66148c80b381f17596a4d9f152566e50379f3c4961","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3f549cc29c1a9348f8828df3cec9589fd52bbea526ba7fac532f6b351178c67"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12b7b22089afea60a850ba66148c80b381f17596a4d9f152566e50379f3c4961"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9880dd23f09e2c358e6639506cc4bbafdc5a604951980f3dcd9c7acbe984efc0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd25c9736bb6e78e27c3d3fc239b525f18d061ae6e2d9ac35bc866ac4104173e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd25c9736bb6e78e27c3d3fc239b525f18d061ae6e2d9ac35bc866ac4104173e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd25c9736bb6e78e27c3d3fc239b525f18d061ae6e2d9ac35bc866ac4104173e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3f549cc29c1a9348f8828df3cec9589fd52bbea526ba7fac532f6b351178c67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3f549cc29c1a9348f8828df3cec9589fd52bbea526ba7fac532f6b351178c67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd25c9736bb6e78e27c3d3fc239b525f18d061ae6e2d9ac35bc866ac4104173e"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3f549cc29c1a9348f8828df3cec9589fd52bbea526ba7fac532f6b351178c67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12b7b22089afea60a850ba66148c80b381f17596a4d9f152566e50379f3c4961","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd25c9736bb6e78e27c3d3fc239b525f18d061ae6e2d9ac35bc866ac4104173e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c88ad846336ce72783011fe8bd3a8fb96b4c6610a50c80cc5c4877091c258a63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c88ad846336ce72783011fe8bd3a8fb96b4c6610a50c80cc5c4877091c258a63"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3f549cc29c1a9348f8828df3cec9589fd52bbea526ba7fac532f6b351178c67"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c88ad846336ce72783011fe8bd3a8fb96b4c6610a50c80cc5c4877091c258a63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3f549cc29c1a9348f8828df3cec9589fd52bbea526ba7fac532f6b351178c67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:37:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5"} {"level":"info","ts":"2026-07-20T18:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c88ad846336ce72783011fe8bd3a8fb96b4c6610a50c80cc5c4877091c258a63"} {"level":"info","ts":"2026-07-20T18:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c88ad846336ce72783011fe8bd3a8fb96b4c6610a50c80cc5c4877091c258a63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c88ad846336ce72783011fe8bd3a8fb96b4c6610a50c80cc5c4877091c258a63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5"} {"level":"info","ts":"2026-07-20T18:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c88ad846336ce72783011fe8bd3a8fb96b4c6610a50c80cc5c4877091c258a63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c88ad846336ce72783011fe8bd3a8fb96b4c6610a50c80cc5c4877091c258a63"} {"level":"info","ts":"2026-07-20T18:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c88ad846336ce72783011fe8bd3a8fb96b4c6610a50c80cc5c4877091c258a63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:37:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:37:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5"} {"level":"info","ts":"2026-07-20T18:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5"} {"level":"debug","ts":"2026-07-20T18:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:37:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:37:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5"} {"level":"info","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3d8ec92-ad43-4ed9-b9bd-65e8abeee966","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37360","PortSpecifier":{"PortValue":37360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f3d8ec92-ad43-4ed9-b9bd-65e8abeee966","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3d8ec92-ad43-4ed9-b9bd-65e8abeee966","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37360","PortSpecifier":{"PortValue":37360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572625,"nanos":98963393},"http":{"id":"f3d8ec92-ad43-4ed9-b9bd-65e8abeee966","method":"POST","headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f3d8ec92-ad43-4ed9-b9bd-65e8abeee966","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f3d8ec92-ad43-4ed9-b9bd-65e8abeee966","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"]}} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f3d8ec92-ad43-4ed9-b9bd-65e8abeee966","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3d8ec92-ad43-4ed9-b9bd-65e8abeee966","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3d8ec92-ad43-4ed9-b9bd-65e8abeee966","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3d8ec92-ad43-4ed9-b9bd-65e8abeee966","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daa21b/sub-test-model-daa21b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daa21b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f3d8ec92-ad43-4ed9-b9bd-65e8abeee966","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3d8ec92-ad43-4ed9-b9bd-65e8abeee966","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3d8ec92-ad43-4ed9-b9bd-65e8abeee966","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3d8ec92-ad43-4ed9-b9bd-65e8abeee966","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3d8ec92-ad43-4ed9-b9bd-65e8abeee966","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09d47301-7f39-44e2-a6b7-3f129dbde583","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43552","PortSpecifier":{"PortValue":43552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09d47301-7f39-44e2-a6b7-3f129dbde583","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09d47301-7f39-44e2-a6b7-3f129dbde583","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43552","PortSpecifier":{"PortValue":43552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572625,"nanos":139976158},"http":{"id":"09d47301-7f39-44e2-a6b7-3f129dbde583","method":"POST","headers":{":authority":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"09d47301-7f39-44e2-a6b7-3f129dbde583","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09d47301-7f39-44e2-a6b7-3f129dbde583","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"]}} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09d47301-7f39-44e2-a6b7-3f129dbde583","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09d47301-7f39-44e2-a6b7-3f129dbde583","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09d47301-7f39-44e2-a6b7-3f129dbde583","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09d47301-7f39-44e2-a6b7-3f129dbde583","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d56278/sub-test-model-d56278\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d56278/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"09d47301-7f39-44e2-a6b7-3f129dbde583","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09d47301-7f39-44e2-a6b7-3f129dbde583","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09d47301-7f39-44e2-a6b7-3f129dbde583","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09d47301-7f39-44e2-a6b7-3f129dbde583","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09d47301-7f39-44e2-a6b7-3f129dbde583","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1489dab-794d-4daf-bc55-38282b44c0c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37376","PortSpecifier":{"PortValue":37376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d1489dab-794d-4daf-bc55-38282b44c0c1","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1489dab-794d-4daf-bc55-38282b44c0c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:37376","PortSpecifier":{"PortValue":37376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572625,"nanos":177512716},"http":{"id":"d1489dab-794d-4daf-bc55-38282b44c0c1","method":"POST","headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d1489dab-794d-4daf-bc55-38282b44c0c1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-dOQ8onmQNuYT8NV9_iGC4ZWaAhrtwMsoiwm5GkZhEB1bXkxLBKlpNih5DTXq"} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d1489dab-794d-4daf-bc55-38282b44c0c1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-dOQ8onmQNuYT8NV9_iGC4ZWaAhrtwMsoiwm5GkZhEB1bXkxLBKlpNih5DTXq\"}"} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d1489dab-794d-4daf-bc55-38282b44c0c1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a15aa3af-4cca-4b20-b181-486566ba5d85","keyName":"e2e-sub-iso-fc947c","subscription":"e2e-shared-sub-89f975","tenant":"e2e-shared-a-daa21b","userId":"a15aa3af-4cca-4b20-b181-486566ba5d85","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d1489dab-794d-4daf-bc55-38282b44c0c1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1489dab-794d-4daf-bc55-38282b44c0c1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1489dab-794d-4daf-bc55-38282b44c0c1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1489dab-794d-4daf-bc55-38282b44c0c1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daa21b/sub-test-model-daa21b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daa21b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d1489dab-794d-4daf-bc55-38282b44c0c1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1489dab-794d-4daf-bc55-38282b44c0c1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1489dab-794d-4daf-bc55-38282b44c0c1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-89f975"} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1489dab-794d-4daf-bc55-38282b44c0c1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1489dab-794d-4daf-bc55-38282b44c0c1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1489dab-794d-4daf-bc55-38282b44c0c1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4227734b-3610-49aa-a754-28cb24430dd4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43556","PortSpecifier":{"PortValue":43556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4227734b-3610-49aa-a754-28cb24430dd4","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4227734b-3610-49aa-a754-28cb24430dd4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43556","PortSpecifier":{"PortValue":43556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572625,"nanos":209015617},"http":{"id":"4227734b-3610-49aa-a754-28cb24430dd4","method":"POST","headers":{":authority":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4227734b-3610-49aa-a754-28cb24430dd4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-T4C2GetZ1t72wTel_sNxJbgLTmAUCeqo9wx3UKsVPBDadinTap4ItiK0Zbz1"} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4227734b-3610-49aa-a754-28cb24430dd4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d56278.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-T4C2GetZ1t72wTel_sNxJbgLTmAUCeqo9wx3UKsVPBDadinTap4ItiK0Zbz1\"}"} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4227734b-3610-49aa-a754-28cb24430dd4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d56278.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"49f9db2f-409e-42c5-916b-691d8a18da9b","keyName":"e2e-sub-iso-784ad8","subscription":"e2e-shared-sub-89f975","tenant":"e2e-shared-b-d56278","userId":"49f9db2f-409e-42c5-916b-691d8a18da9b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4227734b-3610-49aa-a754-28cb24430dd4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4227734b-3610-49aa-a754-28cb24430dd4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4227734b-3610-49aa-a754-28cb24430dd4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4227734b-3610-49aa-a754-28cb24430dd4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d56278/sub-test-model-d56278\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d56278/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4227734b-3610-49aa-a754-28cb24430dd4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4227734b-3610-49aa-a754-28cb24430dd4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-89f975"} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4227734b-3610-49aa-a754-28cb24430dd4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4227734b-3610-49aa-a754-28cb24430dd4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4227734b-3610-49aa-a754-28cb24430dd4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:37:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4227734b-3610-49aa-a754-28cb24430dd4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd25c9736bb6e78e27c3d3fc239b525f18d061ae6e2d9ac35bc866ac4104173e"} {"level":"info","ts":"2026-07-20T18:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d80b04f7dfdcd4b871991de193d7ca0405af00e6643bfdb36e5c108da2ecd8f"} {"level":"info","ts":"2026-07-20T18:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb"} {"level":"info","ts":"2026-07-20T18:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4bd2701e43e6357e93e6f71afd73759054bb37cf11651cf6dda061f4a0549238"} {"level":"info","ts":"2026-07-20T18:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/12b7b22089afea60a850ba66148c80b381f17596a4d9f152566e50379f3c4961"} {"level":"info","ts":"2026-07-20T18:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5744c77acbd1771212a08cf12932f7b254ca69d6ce901dfbbf6140dc1f017628"} {"level":"info","ts":"2026-07-20T18:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9880dd23f09e2c358e6639506cc4bbafdc5a604951980f3dcd9c7acbe984efc0"} {"level":"info","ts":"2026-07-20T18:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/766211b1e4a40acdc1a3aac34f87a304a5e04eb4dd7e562ffca260e31317997b"} {"level":"info","ts":"2026-07-20T18:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"info","ts":"2026-07-20T18:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/207bc8be596cce86161a0448c6b6a8070142753fccbc3c9f0f502d2358ba159e"} {"level":"info","ts":"2026-07-20T18:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b19e1a9165f7370f246c8cbc76b83b1f550e4fd801356dcb0cf953ebcdc54ceb"} {"level":"info","ts":"2026-07-20T18:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"} {"level":"info","ts":"2026-07-20T18:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e4cffed48ccadf132938f5e7d1d0913fb562c89531f17b46c8afd574510f0a6"} {"level":"info","ts":"2026-07-20T18:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"} {"level":"info","ts":"2026-07-20T18:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5"} {"level":"info","ts":"2026-07-20T18:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0"} {"level":"info","ts":"2026-07-20T18:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3f549cc29c1a9348f8828df3cec9589fd52bbea526ba7fac532f6b351178c67"} {"level":"info","ts":"2026-07-20T18:37:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3"} {"level":"info","ts":"2026-07-20T18:37:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d12c7e3452a10ba99055cc6330b5d5699c4d81ebe2d5f214553a5ddd3e30999c"} {"level":"info","ts":"2026-07-20T18:37:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f953bbf31c78ee188505bba38fc32a37388270586f0f4694cb44aea262e65af4"} {"level":"info","ts":"2026-07-20T18:37:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c88ad846336ce72783011fe8bd3a8fb96b4c6610a50c80cc5c4877091c258a63"} {"level":"info","ts":"2026-07-20T18:37:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2005ad14b0cfd7fb15c2f2c85a97455e78650e44e4156e4fda6308837fafb91"} {"level":"info","ts":"2026-07-20T18:37:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"} {"level":"info","ts":"2026-07-20T18:37:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e520b3761ecf72b060b4b6237821c739deab442d62686413856a27067fe9c961"} {"level":"debug","ts":"2026-07-20T18:38:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44b4b59af61caf95d89b59ce6155bc7a5c8febbe1e5cfeefb9da83a966461833","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44b4b59af61caf95d89b59ce6155bc7a5c8febbe1e5cfeefb9da83a966461833","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44b4b59af61caf95d89b59ce6155bc7a5c8febbe1e5cfeefb9da83a966461833","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44b4b59af61caf95d89b59ce6155bc7a5c8febbe1e5cfeefb9da83a966461833","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:38:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44b4b59af61caf95d89b59ce6155bc7a5c8febbe1e5cfeefb9da83a966461833"} {"level":"debug","ts":"2026-07-20T18:38:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44b4b59af61caf95d89b59ce6155bc7a5c8febbe1e5cfeefb9da83a966461833","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:38:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44b4b59af61caf95d89b59ce6155bc7a5c8febbe1e5cfeefb9da83a966461833"} {"level":"debug","ts":"2026-07-20T18:38:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44b4b59af61caf95d89b59ce6155bc7a5c8febbe1e5cfeefb9da83a966461833","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44b4b59af61caf95d89b59ce6155bc7a5c8febbe1e5cfeefb9da83a966461833"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44b4b59af61caf95d89b59ce6155bc7a5c8febbe1e5cfeefb9da83a966461833","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44b4b59af61caf95d89b59ce6155bc7a5c8febbe1e5cfeefb9da83a966461833","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44b4b59af61caf95d89b59ce6155bc7a5c8febbe1e5cfeefb9da83a966461833"} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b607549eddf4151203b79a5beacb24aafac6c7d6ba1f8b997542abc65b12e2c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b607549eddf4151203b79a5beacb24aafac6c7d6ba1f8b997542abc65b12e2c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b607549eddf4151203b79a5beacb24aafac6c7d6ba1f8b997542abc65b12e2c0"} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b607549eddf4151203b79a5beacb24aafac6c7d6ba1f8b997542abc65b12e2c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b607549eddf4151203b79a5beacb24aafac6c7d6ba1f8b997542abc65b12e2c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b607549eddf4151203b79a5beacb24aafac6c7d6ba1f8b997542abc65b12e2c0"} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b607549eddf4151203b79a5beacb24aafac6c7d6ba1f8b997542abc65b12e2c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b607549eddf4151203b79a5beacb24aafac6c7d6ba1f8b997542abc65b12e2c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b607549eddf4151203b79a5beacb24aafac6c7d6ba1f8b997542abc65b12e2c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b607549eddf4151203b79a5beacb24aafac6c7d6ba1f8b997542abc65b12e2c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b607549eddf4151203b79a5beacb24aafac6c7d6ba1f8b997542abc65b12e2c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b607549eddf4151203b79a5beacb24aafac6c7d6ba1f8b997542abc65b12e2c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b607549eddf4151203b79a5beacb24aafac6c7d6ba1f8b997542abc65b12e2c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b607549eddf4151203b79a5beacb24aafac6c7d6ba1f8b997542abc65b12e2c0"} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b607549eddf4151203b79a5beacb24aafac6c7d6ba1f8b997542abc65b12e2c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b607549eddf4151203b79a5beacb24aafac6c7d6ba1f8b997542abc65b12e2c0"} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b607549eddf4151203b79a5beacb24aafac6c7d6ba1f8b997542abc65b12e2c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b607549eddf4151203b79a5beacb24aafac6c7d6ba1f8b997542abc65b12e2c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b607549eddf4151203b79a5beacb24aafac6c7d6ba1f8b997542abc65b12e2c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b607549eddf4151203b79a5beacb24aafac6c7d6ba1f8b997542abc65b12e2c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b607549eddf4151203b79a5beacb24aafac6c7d6ba1f8b997542abc65b12e2c0"} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e35e5908cb5df9bf7aac69e09be276165661617f5eab7ee284be3d96ec2b232","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e35e5908cb5df9bf7aac69e09be276165661617f5eab7ee284be3d96ec2b232"} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e35e5908cb5df9bf7aac69e09be276165661617f5eab7ee284be3d96ec2b232","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e35e5908cb5df9bf7aac69e09be276165661617f5eab7ee284be3d96ec2b232","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e35e5908cb5df9bf7aac69e09be276165661617f5eab7ee284be3d96ec2b232","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e35e5908cb5df9bf7aac69e09be276165661617f5eab7ee284be3d96ec2b232"} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e35e5908cb5df9bf7aac69e09be276165661617f5eab7ee284be3d96ec2b232","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e35e5908cb5df9bf7aac69e09be276165661617f5eab7ee284be3d96ec2b232"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e35e5908cb5df9bf7aac69e09be276165661617f5eab7ee284be3d96ec2b232","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e35e5908cb5df9bf7aac69e09be276165661617f5eab7ee284be3d96ec2b232","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e35e5908cb5df9bf7aac69e09be276165661617f5eab7ee284be3d96ec2b232","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e35e5908cb5df9bf7aac69e09be276165661617f5eab7ee284be3d96ec2b232","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e35e5908cb5df9bf7aac69e09be276165661617f5eab7ee284be3d96ec2b232","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e35e5908cb5df9bf7aac69e09be276165661617f5eab7ee284be3d96ec2b232"} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8561b49755a02177d6e6ae2ca3b79ce55152756abf1bf3847380f76b03c9941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8561b49755a02177d6e6ae2ca3b79ce55152756abf1bf3847380f76b03c9941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e35e5908cb5df9bf7aac69e09be276165661617f5eab7ee284be3d96ec2b232","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8561b49755a02177d6e6ae2ca3b79ce55152756abf1bf3847380f76b03c9941","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e35e5908cb5df9bf7aac69e09be276165661617f5eab7ee284be3d96ec2b232"} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8561b49755a02177d6e6ae2ca3b79ce55152756abf1bf3847380f76b03c9941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8561b49755a02177d6e6ae2ca3b79ce55152756abf1bf3847380f76b03c9941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8561b49755a02177d6e6ae2ca3b79ce55152756abf1bf3847380f76b03c9941","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8561b49755a02177d6e6ae2ca3b79ce55152756abf1bf3847380f76b03c9941"} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e35e5908cb5df9bf7aac69e09be276165661617f5eab7ee284be3d96ec2b232","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e35e5908cb5df9bf7aac69e09be276165661617f5eab7ee284be3d96ec2b232"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8561b49755a02177d6e6ae2ca3b79ce55152756abf1bf3847380f76b03c9941"} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e35e5908cb5df9bf7aac69e09be276165661617f5eab7ee284be3d96ec2b232","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8561b49755a02177d6e6ae2ca3b79ce55152756abf1bf3847380f76b03c9941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8561b49755a02177d6e6ae2ca3b79ce55152756abf1bf3847380f76b03c9941"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8561b49755a02177d6e6ae2ca3b79ce55152756abf1bf3847380f76b03c9941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e35e5908cb5df9bf7aac69e09be276165661617f5eab7ee284be3d96ec2b232","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e35e5908cb5df9bf7aac69e09be276165661617f5eab7ee284be3d96ec2b232"} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e35e5908cb5df9bf7aac69e09be276165661617f5eab7ee284be3d96ec2b232","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8561b49755a02177d6e6ae2ca3b79ce55152756abf1bf3847380f76b03c9941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8561b49755a02177d6e6ae2ca3b79ce55152756abf1bf3847380f76b03c9941"} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8561b49755a02177d6e6ae2ca3b79ce55152756abf1bf3847380f76b03c9941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12630ee62ec340d2bde6c2bdd50022a5231b87a2d86747af6b3cad0d6f9afaf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12630ee62ec340d2bde6c2bdd50022a5231b87a2d86747af6b3cad0d6f9afaf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e35e5908cb5df9bf7aac69e09be276165661617f5eab7ee284be3d96ec2b232","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e35e5908cb5df9bf7aac69e09be276165661617f5eab7ee284be3d96ec2b232"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12630ee62ec340d2bde6c2bdd50022a5231b87a2d86747af6b3cad0d6f9afaf0"} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e35e5908cb5df9bf7aac69e09be276165661617f5eab7ee284be3d96ec2b232","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2aa62e99ff6d4a083ac54b0a59c401b6aefc749becf3cde351ea3ab41088c181","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e35e5908cb5df9bf7aac69e09be276165661617f5eab7ee284be3d96ec2b232"} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2aa62e99ff6d4a083ac54b0a59c401b6aefc749becf3cde351ea3ab41088c181","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8561b49755a02177d6e6ae2ca3b79ce55152756abf1bf3847380f76b03c9941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8561b49755a02177d6e6ae2ca3b79ce55152756abf1bf3847380f76b03c9941"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8561b49755a02177d6e6ae2ca3b79ce55152756abf1bf3847380f76b03c9941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12630ee62ec340d2bde6c2bdd50022a5231b87a2d86747af6b3cad0d6f9afaf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12630ee62ec340d2bde6c2bdd50022a5231b87a2d86747af6b3cad0d6f9afaf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2aa62e99ff6d4a083ac54b0a59c401b6aefc749becf3cde351ea3ab41088c181"} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12630ee62ec340d2bde6c2bdd50022a5231b87a2d86747af6b3cad0d6f9afaf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e35e5908cb5df9bf7aac69e09be276165661617f5eab7ee284be3d96ec2b232","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2aa62e99ff6d4a083ac54b0a59c401b6aefc749becf3cde351ea3ab41088c181","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2aa62e99ff6d4a083ac54b0a59c401b6aefc749becf3cde351ea3ab41088c181"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8561b49755a02177d6e6ae2ca3b79ce55152756abf1bf3847380f76b03c9941"} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2aa62e99ff6d4a083ac54b0a59c401b6aefc749becf3cde351ea3ab41088c181","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8561b49755a02177d6e6ae2ca3b79ce55152756abf1bf3847380f76b03c9941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12630ee62ec340d2bde6c2bdd50022a5231b87a2d86747af6b3cad0d6f9afaf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12630ee62ec340d2bde6c2bdd50022a5231b87a2d86747af6b3cad0d6f9afaf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25d453ffa5fa8792fb124daab4411f2961b4b3030f1db7646859434d83950279","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12630ee62ec340d2bde6c2bdd50022a5231b87a2d86747af6b3cad0d6f9afaf0"} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25d453ffa5fa8792fb124daab4411f2961b4b3030f1db7646859434d83950279","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2aa62e99ff6d4a083ac54b0a59c401b6aefc749becf3cde351ea3ab41088c181","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12630ee62ec340d2bde6c2bdd50022a5231b87a2d86747af6b3cad0d6f9afaf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12630ee62ec340d2bde6c2bdd50022a5231b87a2d86747af6b3cad0d6f9afaf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e35e5908cb5df9bf7aac69e09be276165661617f5eab7ee284be3d96ec2b232"} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12630ee62ec340d2bde6c2bdd50022a5231b87a2d86747af6b3cad0d6f9afaf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25d453ffa5fa8792fb124daab4411f2961b4b3030f1db7646859434d83950279","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12630ee62ec340d2bde6c2bdd50022a5231b87a2d86747af6b3cad0d6f9afaf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25d453ffa5fa8792fb124daab4411f2961b4b3030f1db7646859434d83950279","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2aa62e99ff6d4a083ac54b0a59c401b6aefc749becf3cde351ea3ab41088c181"} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25d453ffa5fa8792fb124daab4411f2961b4b3030f1db7646859434d83950279","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25d453ffa5fa8792fb124daab4411f2961b4b3030f1db7646859434d83950279"} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25d453ffa5fa8792fb124daab4411f2961b4b3030f1db7646859434d83950279","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25d453ffa5fa8792fb124daab4411f2961b4b3030f1db7646859434d83950279","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25d453ffa5fa8792fb124daab4411f2961b4b3030f1db7646859434d83950279"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12630ee62ec340d2bde6c2bdd50022a5231b87a2d86747af6b3cad0d6f9afaf0"} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25d453ffa5fa8792fb124daab4411f2961b4b3030f1db7646859434d83950279","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8fa9a210149c42706689d44f737ec92438ad243b19858cd52c898bad22a7eae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8fa9a210149c42706689d44f737ec92438ad243b19858cd52c898bad22a7eae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25d453ffa5fa8792fb124daab4411f2961b4b3030f1db7646859434d83950279","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25d453ffa5fa8792fb124daab4411f2961b4b3030f1db7646859434d83950279"} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25d453ffa5fa8792fb124daab4411f2961b4b3030f1db7646859434d83950279","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63167136c361a73f019ba273c9a5881ffa93d53d5beacfd2901d8d768754929b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63167136c361a73f019ba273c9a5881ffa93d53d5beacfd2901d8d768754929b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8fa9a210149c42706689d44f737ec92438ad243b19858cd52c898bad22a7eae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8fa9a210149c42706689d44f737ec92438ad243b19858cd52c898bad22a7eae"} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8fa9a210149c42706689d44f737ec92438ad243b19858cd52c898bad22a7eae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25d453ffa5fa8792fb124daab4411f2961b4b3030f1db7646859434d83950279","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25d453ffa5fa8792fb124daab4411f2961b4b3030f1db7646859434d83950279"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25d453ffa5fa8792fb124daab4411f2961b4b3030f1db7646859434d83950279","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63167136c361a73f019ba273c9a5881ffa93d53d5beacfd2901d8d768754929b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63167136c361a73f019ba273c9a5881ffa93d53d5beacfd2901d8d768754929b"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63167136c361a73f019ba273c9a5881ffa93d53d5beacfd2901d8d768754929b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8fa9a210149c42706689d44f737ec92438ad243b19858cd52c898bad22a7eae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8fa9a210149c42706689d44f737ec92438ad243b19858cd52c898bad22a7eae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8fa9a210149c42706689d44f737ec92438ad243b19858cd52c898bad22a7eae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25d453ffa5fa8792fb124daab4411f2961b4b3030f1db7646859434d83950279","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25d453ffa5fa8792fb124daab4411f2961b4b3030f1db7646859434d83950279"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25d453ffa5fa8792fb124daab4411f2961b4b3030f1db7646859434d83950279","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d77742ec82c63ccfc15e930af15f3e74ec13778c66ae9c22128dd0dda8cdf447","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d77742ec82c63ccfc15e930af15f3e74ec13778c66ae9c22128dd0dda8cdf447","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63167136c361a73f019ba273c9a5881ffa93d53d5beacfd2901d8d768754929b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63167136c361a73f019ba273c9a5881ffa93d53d5beacfd2901d8d768754929b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8fa9a210149c42706689d44f737ec92438ad243b19858cd52c898bad22a7eae"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63167136c361a73f019ba273c9a5881ffa93d53d5beacfd2901d8d768754929b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8fa9a210149c42706689d44f737ec92438ad243b19858cd52c898bad22a7eae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3671578e8be4cde04df50130fdda953c5d917dc325328230ecc93afc7c59f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d77742ec82c63ccfc15e930af15f3e74ec13778c66ae9c22128dd0dda8cdf447"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3671578e8be4cde04df50130fdda953c5d917dc325328230ecc93afc7c59f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25d453ffa5fa8792fb124daab4411f2961b4b3030f1db7646859434d83950279","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25d453ffa5fa8792fb124daab4411f2961b4b3030f1db7646859434d83950279"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25d453ffa5fa8792fb124daab4411f2961b4b3030f1db7646859434d83950279","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d77742ec82c63ccfc15e930af15f3e74ec13778c66ae9c22128dd0dda8cdf447","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d77742ec82c63ccfc15e930af15f3e74ec13778c66ae9c22128dd0dda8cdf447"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63167136c361a73f019ba273c9a5881ffa93d53d5beacfd2901d8d768754929b"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d77742ec82c63ccfc15e930af15f3e74ec13778c66ae9c22128dd0dda8cdf447","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63167136c361a73f019ba273c9a5881ffa93d53d5beacfd2901d8d768754929b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3011a98d3a5c3ae3cd2f47a4685448330a826cc71eb66eba83988c4953877353","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3671578e8be4cde04df50130fdda953c5d917dc325328230ecc93afc7c59f1"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3011a98d3a5c3ae3cd2f47a4685448330a826cc71eb66eba83988c4953877353","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3671578e8be4cde04df50130fdda953c5d917dc325328230ecc93afc7c59f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3671578e8be4cde04df50130fdda953c5d917dc325328230ecc93afc7c59f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3671578e8be4cde04df50130fdda953c5d917dc325328230ecc93afc7c59f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25d453ffa5fa8792fb124daab4411f2961b4b3030f1db7646859434d83950279"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25d453ffa5fa8792fb124daab4411f2961b4b3030f1db7646859434d83950279","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0448bd386c1995cb8b2babd2288fbe395e3742d73d735fdf072eba41b3b24f44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3011a98d3a5c3ae3cd2f47a4685448330a826cc71eb66eba83988c4953877353"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0448bd386c1995cb8b2babd2288fbe395e3742d73d735fdf072eba41b3b24f44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d77742ec82c63ccfc15e930af15f3e74ec13778c66ae9c22128dd0dda8cdf447","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3011a98d3a5c3ae3cd2f47a4685448330a826cc71eb66eba83988c4953877353","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3011a98d3a5c3ae3cd2f47a4685448330a826cc71eb66eba83988c4953877353"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0448bd386c1995cb8b2babd2288fbe395e3742d73d735fdf072eba41b3b24f44"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d77742ec82c63ccfc15e930af15f3e74ec13778c66ae9c22128dd0dda8cdf447"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3011a98d3a5c3ae3cd2f47a4685448330a826cc71eb66eba83988c4953877353","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53866ab14b60b8c71f0dec13af12976c5069dae60a78392e85066af53251053e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53866ab14b60b8c71f0dec13af12976c5069dae60a78392e85066af53251053e"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53866ab14b60b8c71f0dec13af12976c5069dae60a78392e85066af53251053e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3671578e8be4cde04df50130fdda953c5d917dc325328230ecc93afc7c59f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3671578e8be4cde04df50130fdda953c5d917dc325328230ecc93afc7c59f1"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3671578e8be4cde04df50130fdda953c5d917dc325328230ecc93afc7c59f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3011a98d3a5c3ae3cd2f47a4685448330a826cc71eb66eba83988c4953877353"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0448bd386c1995cb8b2babd2288fbe395e3742d73d735fdf072eba41b3b24f44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0448bd386c1995cb8b2babd2288fbe395e3742d73d735fdf072eba41b3b24f44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0448bd386c1995cb8b2babd2288fbe395e3742d73d735fdf072eba41b3b24f44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53866ab14b60b8c71f0dec13af12976c5069dae60a78392e85066af53251053e"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9de294ffeef98f796b16759bd3590be522f058cc90551de049ebdcb2f0b7748f"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3011a98d3a5c3ae3cd2f47a4685448330a826cc71eb66eba83988c4953877353","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3671578e8be4cde04df50130fdda953c5d917dc325328230ecc93afc7c59f1"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e03ed49f09ab9f7031c673351619ef7bc6379c945ed5a8e5999bd5deb312e71"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53866ab14b60b8c71f0dec13af12976c5069dae60a78392e85066af53251053e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53866ab14b60b8c71f0dec13af12976c5069dae60a78392e85066af53251053e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53866ab14b60b8c71f0dec13af12976c5069dae60a78392e85066af53251053e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9de294ffeef98f796b16759bd3590be522f058cc90551de049ebdcb2f0b7748f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9de294ffeef98f796b16759bd3590be522f058cc90551de049ebdcb2f0b7748f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0448bd386c1995cb8b2babd2288fbe395e3742d73d735fdf072eba41b3b24f44"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9de294ffeef98f796b16759bd3590be522f058cc90551de049ebdcb2f0b7748f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a3671578e8be4cde04df50130fdda953c5d917dc325328230ecc93afc7c59f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a3671578e8be4cde04df50130fdda953c5d917dc325328230ecc93afc7c59f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53866ab14b60b8c71f0dec13af12976c5069dae60a78392e85066af53251053e"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a3671578e8be4cde04df50130fdda953c5d917dc325328230ecc93afc7c59f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e03ed49f09ab9f7031c673351619ef7bc6379c945ed5a8e5999bd5deb312e71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e03ed49f09ab9f7031c673351619ef7bc6379c945ed5a8e5999bd5deb312e71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9de294ffeef98f796b16759bd3590be522f058cc90551de049ebdcb2f0b7748f"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a3671578e8be4cde04df50130fdda953c5d917dc325328230ecc93afc7c59f1"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e03ed49f09ab9f7031c673351619ef7bc6379c945ed5a8e5999bd5deb312e71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e03ed49f09ab9f7031c673351619ef7bc6379c945ed5a8e5999bd5deb312e71"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0448bd386c1995cb8b2babd2288fbe395e3742d73d735fdf072eba41b3b24f44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53866ab14b60b8c71f0dec13af12976c5069dae60a78392e85066af53251053e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9de294ffeef98f796b16759bd3590be522f058cc90551de049ebdcb2f0b7748f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a3671578e8be4cde04df50130fdda953c5d917dc325328230ecc93afc7c59f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e03ed49f09ab9f7031c673351619ef7bc6379c945ed5a8e5999bd5deb312e71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0"} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0"} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0"} {"level":"debug","ts":"2026-07-20T18:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T18:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T18:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T18:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T18:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0"} {"level":"info","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c9a7595-c9d7-4ad6-946c-be026759f44b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47548","PortSpecifier":{"PortValue":47548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c9a7595-c9d7-4ad6-946c-be026759f44b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c9a7595-c9d7-4ad6-946c-be026759f44b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47548","PortSpecifier":{"PortValue":47548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572706,"nanos":434203728},"http":{"id":"5c9a7595-c9d7-4ad6-946c-be026759f44b","method":"POST","headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5c9a7595-c9d7-4ad6-946c-be026759f44b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c9a7595-c9d7-4ad6-946c-be026759f44b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"]}} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c9a7595-c9d7-4ad6-946c-be026759f44b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c9a7595-c9d7-4ad6-946c-be026759f44b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c9a7595-c9d7-4ad6-946c-be026759f44b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c9a7595-c9d7-4ad6-946c-be026759f44b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daa21b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5c9a7595-c9d7-4ad6-946c-be026759f44b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c9a7595-c9d7-4ad6-946c-be026759f44b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c9a7595-c9d7-4ad6-946c-be026759f44b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c9a7595-c9d7-4ad6-946c-be026759f44b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c9a7595-c9d7-4ad6-946c-be026759f44b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0115a63b-8567-40e2-98ea-f904bed64d99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57556","PortSpecifier":{"PortValue":57556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0115a63b-8567-40e2-98ea-f904bed64d99","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0115a63b-8567-40e2-98ea-f904bed64d99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57556","PortSpecifier":{"PortValue":57556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572706,"nanos":479769220},"http":{"id":"0115a63b-8567-40e2-98ea-f904bed64d99","method":"POST","headers":{":authority":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0115a63b-8567-40e2-98ea-f904bed64d99","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0115a63b-8567-40e2-98ea-f904bed64d99","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"]}} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0115a63b-8567-40e2-98ea-f904bed64d99","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0115a63b-8567-40e2-98ea-f904bed64d99","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0115a63b-8567-40e2-98ea-f904bed64d99","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0115a63b-8567-40e2-98ea-f904bed64d99","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d56278/rate-test-model-d56278\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d56278/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0115a63b-8567-40e2-98ea-f904bed64d99","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0115a63b-8567-40e2-98ea-f904bed64d99","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0115a63b-8567-40e2-98ea-f904bed64d99","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0115a63b-8567-40e2-98ea-f904bed64d99","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0115a63b-8567-40e2-98ea-f904bed64d99","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20e01d61-17cf-434e-84eb-c55189394a1d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47556","PortSpecifier":{"PortValue":47556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"20e01d61-17cf-434e-84eb-c55189394a1d","method":"POST","path":"/ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b/v1/completions","host":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20e01d61-17cf-434e-84eb-c55189394a1d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47556","PortSpecifier":{"PortValue":47556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572706,"nanos":527466408},"http":{"id":"20e01d61-17cf-434e-84eb-c55189394a1d","method":"POST","headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"20e01d61-17cf-434e-84eb-c55189394a1d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AqhDB8tDSHIyBBTQ_8xs7NREs0MubR3N5WcrXQ2Xpt7fQrNrK9C7VIpalPtI"} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"20e01d61-17cf-434e-84eb-c55189394a1d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AqhDB8tDSHIyBBTQ_8xs7NREs0MubR3N5WcrXQ2Xpt7fQrNrK9C7VIpalPtI\"}"} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"20e01d61-17cf-434e-84eb-c55189394a1d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c3902cbb-9793-40ec-b3a5-96969f41ad6d","keyName":"e2e-rate-a-7f67fc","subscription":"e2e-rate-iso-a-7f67fc","tenant":"e2e-shared-a-daa21b","userId":"c3902cbb-9793-40ec-b3a5-96969f41ad6d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"20e01d61-17cf-434e-84eb-c55189394a1d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b\",\"requestedSubscription\":\"e2e-rate-iso-a-7f67fc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"20e01d61-17cf-434e-84eb-c55189394a1d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-daa21b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7f67fc","namespace":"ai-tenant-e2e-shared-a-daa21b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b"}} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"20e01d61-17cf-434e-84eb-c55189394a1d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20e01d61-17cf-434e-84eb-c55189394a1d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20e01d61-17cf-434e-84eb-c55189394a1d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20e01d61-17cf-434e-84eb-c55189394a1d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20e01d61-17cf-434e-84eb-c55189394a1d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daa21b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20e01d61-17cf-434e-84eb-c55189394a1d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20e01d61-17cf-434e-84eb-c55189394a1d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7f67fc"} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20e01d61-17cf-434e-84eb-c55189394a1d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20e01d61-17cf-434e-84eb-c55189394a1d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c3902cbb-9793-40ec-b3a5-96969f41ad6d","keyName":"e2e-rate-a-7f67fc","selected_subscription":"e2e-rate-iso-a-7f67fc","selected_subscription_key":"ai-tenant-e2e-shared-a-daa21b/e2e-rate-iso-a-7f67fc@ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-daa21b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7f67fc","namespace":"ai-tenant-e2e-shared-a-daa21b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20e01d61-17cf-434e-84eb-c55189394a1d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:38:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20e01d61-17cf-434e-84eb-c55189394a1d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:38:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0354560a-4594-4bed-b373-9329199b6122","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47558","PortSpecifier":{"PortValue":47558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0354560a-4594-4bed-b373-9329199b6122","method":"POST","path":"/ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b/v1/completions","host":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:38:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0354560a-4594-4bed-b373-9329199b6122","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47558","PortSpecifier":{"PortValue":47558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572707,"nanos":599599951},"http":{"id":"0354560a-4594-4bed-b373-9329199b6122","method":"POST","headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0354560a-4594-4bed-b373-9329199b6122","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AqhDB8tDSHIyBBTQ_8xs7NREs0MubR3N5WcrXQ2Xpt7fQrNrK9C7VIpalPtI"} {"level":"debug","ts":"2026-07-20T18:38:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0354560a-4594-4bed-b373-9329199b6122","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AqhDB8tDSHIyBBTQ_8xs7NREs0MubR3N5WcrXQ2Xpt7fQrNrK9C7VIpalPtI\"}"} {"level":"debug","ts":"2026-07-20T18:38:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0354560a-4594-4bed-b373-9329199b6122","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c3902cbb-9793-40ec-b3a5-96969f41ad6d","keyName":"e2e-rate-a-7f67fc","subscription":"e2e-rate-iso-a-7f67fc","tenant":"e2e-shared-a-daa21b","userId":"c3902cbb-9793-40ec-b3a5-96969f41ad6d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T18:38:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0354560a-4594-4bed-b373-9329199b6122","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b\",\"requestedSubscription\":\"e2e-rate-iso-a-7f67fc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T18:38:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0354560a-4594-4bed-b373-9329199b6122","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-daa21b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7f67fc","namespace":"ai-tenant-e2e-shared-a-daa21b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b"}} {"level":"debug","ts":"2026-07-20T18:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0354560a-4594-4bed-b373-9329199b6122","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0354560a-4594-4bed-b373-9329199b6122","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0354560a-4594-4bed-b373-9329199b6122","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0354560a-4594-4bed-b373-9329199b6122","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0354560a-4594-4bed-b373-9329199b6122","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daa21b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0354560a-4594-4bed-b373-9329199b6122","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T18:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0354560a-4594-4bed-b373-9329199b6122","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7f67fc"} {"level":"debug","ts":"2026-07-20T18:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0354560a-4594-4bed-b373-9329199b6122","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T18:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0354560a-4594-4bed-b373-9329199b6122","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c3902cbb-9793-40ec-b3a5-96969f41ad6d","keyName":"e2e-rate-a-7f67fc","selected_subscription":"e2e-rate-iso-a-7f67fc","selected_subscription_key":"ai-tenant-e2e-shared-a-daa21b/e2e-rate-iso-a-7f67fc@ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-daa21b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7f67fc","namespace":"ai-tenant-e2e-shared-a-daa21b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T18:38:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0354560a-4594-4bed-b373-9329199b6122","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:38:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0354560a-4594-4bed-b373-9329199b6122","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:38:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b18976da-98f8-4f70-927f-921f9309ea56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47570","PortSpecifier":{"PortValue":47570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b18976da-98f8-4f70-927f-921f9309ea56","method":"POST","path":"/ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b/v1/completions","host":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:38:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b18976da-98f8-4f70-927f-921f9309ea56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:47570","PortSpecifier":{"PortValue":47570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572708,"nanos":643311551},"http":{"id":"b18976da-98f8-4f70-927f-921f9309ea56","method":"POST","headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b18976da-98f8-4f70-927f-921f9309ea56","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AqhDB8tDSHIyBBTQ_8xs7NREs0MubR3N5WcrXQ2Xpt7fQrNrK9C7VIpalPtI"} {"level":"debug","ts":"2026-07-20T18:38:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b18976da-98f8-4f70-927f-921f9309ea56","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AqhDB8tDSHIyBBTQ_8xs7NREs0MubR3N5WcrXQ2Xpt7fQrNrK9C7VIpalPtI\"}"} {"level":"debug","ts":"2026-07-20T18:38:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b18976da-98f8-4f70-927f-921f9309ea56","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c3902cbb-9793-40ec-b3a5-96969f41ad6d","keyName":"e2e-rate-a-7f67fc","subscription":"e2e-rate-iso-a-7f67fc","tenant":"e2e-shared-a-daa21b","userId":"c3902cbb-9793-40ec-b3a5-96969f41ad6d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T18:38:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b18976da-98f8-4f70-927f-921f9309ea56","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b\",\"requestedSubscription\":\"e2e-rate-iso-a-7f67fc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T18:38:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b18976da-98f8-4f70-927f-921f9309ea56","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-daa21b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7f67fc","namespace":"ai-tenant-e2e-shared-a-daa21b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b"}} {"level":"debug","ts":"2026-07-20T18:38:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b18976da-98f8-4f70-927f-921f9309ea56","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b18976da-98f8-4f70-927f-921f9309ea56","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b18976da-98f8-4f70-927f-921f9309ea56","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b18976da-98f8-4f70-927f-921f9309ea56","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daa21b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b18976da-98f8-4f70-927f-921f9309ea56","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b18976da-98f8-4f70-927f-921f9309ea56","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T18:38:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b18976da-98f8-4f70-927f-921f9309ea56","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T18:38:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b18976da-98f8-4f70-927f-921f9309ea56","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7f67fc"} {"level":"debug","ts":"2026-07-20T18:38:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b18976da-98f8-4f70-927f-921f9309ea56","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c3902cbb-9793-40ec-b3a5-96969f41ad6d","keyName":"e2e-rate-a-7f67fc","selected_subscription":"e2e-rate-iso-a-7f67fc","selected_subscription_key":"ai-tenant-e2e-shared-a-daa21b/e2e-rate-iso-a-7f67fc@ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-daa21b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7f67fc","namespace":"ai-tenant-e2e-shared-a-daa21b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T18:38:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b18976da-98f8-4f70-927f-921f9309ea56","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:38:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b18976da-98f8-4f70-927f-921f9309ea56","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:38:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab24da78-b9ca-4fdd-95e4-311d22a7362f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52470","PortSpecifier":{"PortValue":52470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ab24da78-b9ca-4fdd-95e4-311d22a7362f","method":"POST","path":"/ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b/v1/completions","host":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:38:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab24da78-b9ca-4fdd-95e4-311d22a7362f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52470","PortSpecifier":{"PortValue":52470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572709,"nanos":683567280},"http":{"id":"ab24da78-b9ca-4fdd-95e4-311d22a7362f","method":"POST","headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ab24da78-b9ca-4fdd-95e4-311d22a7362f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AqhDB8tDSHIyBBTQ_8xs7NREs0MubR3N5WcrXQ2Xpt7fQrNrK9C7VIpalPtI"} {"level":"debug","ts":"2026-07-20T18:38:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ab24da78-b9ca-4fdd-95e4-311d22a7362f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AqhDB8tDSHIyBBTQ_8xs7NREs0MubR3N5WcrXQ2Xpt7fQrNrK9C7VIpalPtI\"}"} {"level":"debug","ts":"2026-07-20T18:38:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ab24da78-b9ca-4fdd-95e4-311d22a7362f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c3902cbb-9793-40ec-b3a5-96969f41ad6d","keyName":"e2e-rate-a-7f67fc","subscription":"e2e-rate-iso-a-7f67fc","tenant":"e2e-shared-a-daa21b","userId":"c3902cbb-9793-40ec-b3a5-96969f41ad6d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T18:38:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ab24da78-b9ca-4fdd-95e4-311d22a7362f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b\",\"requestedSubscription\":\"e2e-rate-iso-a-7f67fc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T18:38:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ab24da78-b9ca-4fdd-95e4-311d22a7362f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-daa21b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7f67fc","namespace":"ai-tenant-e2e-shared-a-daa21b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b"}} {"level":"debug","ts":"2026-07-20T18:38:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ab24da78-b9ca-4fdd-95e4-311d22a7362f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab24da78-b9ca-4fdd-95e4-311d22a7362f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab24da78-b9ca-4fdd-95e4-311d22a7362f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab24da78-b9ca-4fdd-95e4-311d22a7362f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab24da78-b9ca-4fdd-95e4-311d22a7362f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daa21b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab24da78-b9ca-4fdd-95e4-311d22a7362f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T18:38:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab24da78-b9ca-4fdd-95e4-311d22a7362f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7f67fc"} {"level":"debug","ts":"2026-07-20T18:38:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab24da78-b9ca-4fdd-95e4-311d22a7362f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T18:38:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab24da78-b9ca-4fdd-95e4-311d22a7362f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c3902cbb-9793-40ec-b3a5-96969f41ad6d","keyName":"e2e-rate-a-7f67fc","selected_subscription":"e2e-rate-iso-a-7f67fc","selected_subscription_key":"ai-tenant-e2e-shared-a-daa21b/e2e-rate-iso-a-7f67fc@ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-daa21b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7f67fc","namespace":"ai-tenant-e2e-shared-a-daa21b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T18:38:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab24da78-b9ca-4fdd-95e4-311d22a7362f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:38:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab24da78-b9ca-4fdd-95e4-311d22a7362f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:38:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58ad15bd-6965-4db9-a61f-7452fb11e1d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52478","PortSpecifier":{"PortValue":52478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"58ad15bd-6965-4db9-a61f-7452fb11e1d5","method":"POST","path":"/ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b/v1/completions","host":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:38:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58ad15bd-6965-4db9-a61f-7452fb11e1d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52478","PortSpecifier":{"PortValue":52478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572710,"nanos":724662321},"http":{"id":"58ad15bd-6965-4db9-a61f-7452fb11e1d5","method":"POST","headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"58ad15bd-6965-4db9-a61f-7452fb11e1d5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AqhDB8tDSHIyBBTQ_8xs7NREs0MubR3N5WcrXQ2Xpt7fQrNrK9C7VIpalPtI"} {"level":"debug","ts":"2026-07-20T18:38:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58ad15bd-6965-4db9-a61f-7452fb11e1d5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AqhDB8tDSHIyBBTQ_8xs7NREs0MubR3N5WcrXQ2Xpt7fQrNrK9C7VIpalPtI\"}"} {"level":"debug","ts":"2026-07-20T18:38:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58ad15bd-6965-4db9-a61f-7452fb11e1d5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c3902cbb-9793-40ec-b3a5-96969f41ad6d","keyName":"e2e-rate-a-7f67fc","subscription":"e2e-rate-iso-a-7f67fc","tenant":"e2e-shared-a-daa21b","userId":"c3902cbb-9793-40ec-b3a5-96969f41ad6d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T18:38:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58ad15bd-6965-4db9-a61f-7452fb11e1d5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b\",\"requestedSubscription\":\"e2e-rate-iso-a-7f67fc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T18:38:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58ad15bd-6965-4db9-a61f-7452fb11e1d5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-daa21b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7f67fc","namespace":"ai-tenant-e2e-shared-a-daa21b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b"}} {"level":"debug","ts":"2026-07-20T18:38:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"58ad15bd-6965-4db9-a61f-7452fb11e1d5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58ad15bd-6965-4db9-a61f-7452fb11e1d5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58ad15bd-6965-4db9-a61f-7452fb11e1d5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58ad15bd-6965-4db9-a61f-7452fb11e1d5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58ad15bd-6965-4db9-a61f-7452fb11e1d5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daa21b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58ad15bd-6965-4db9-a61f-7452fb11e1d5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T18:38:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58ad15bd-6965-4db9-a61f-7452fb11e1d5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T18:38:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58ad15bd-6965-4db9-a61f-7452fb11e1d5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7f67fc"} {"level":"debug","ts":"2026-07-20T18:38:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58ad15bd-6965-4db9-a61f-7452fb11e1d5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c3902cbb-9793-40ec-b3a5-96969f41ad6d","keyName":"e2e-rate-a-7f67fc","selected_subscription":"e2e-rate-iso-a-7f67fc","selected_subscription_key":"ai-tenant-e2e-shared-a-daa21b/e2e-rate-iso-a-7f67fc@ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-daa21b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7f67fc","namespace":"ai-tenant-e2e-shared-a-daa21b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T18:38:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58ad15bd-6965-4db9-a61f-7452fb11e1d5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:38:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58ad15bd-6965-4db9-a61f-7452fb11e1d5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:38:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c3a8288-6188-49cc-8554-d9799ed7fd69","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52480","PortSpecifier":{"PortValue":52480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c3a8288-6188-49cc-8554-d9799ed7fd69","method":"POST","path":"/ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b/v1/completions","host":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:38:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c3a8288-6188-49cc-8554-d9799ed7fd69","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52480","PortSpecifier":{"PortValue":52480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572711,"nanos":767165023},"http":{"id":"5c3a8288-6188-49cc-8554-d9799ed7fd69","method":"POST","headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c3a8288-6188-49cc-8554-d9799ed7fd69","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AqhDB8tDSHIyBBTQ_8xs7NREs0MubR3N5WcrXQ2Xpt7fQrNrK9C7VIpalPtI"} {"level":"debug","ts":"2026-07-20T18:38:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5c3a8288-6188-49cc-8554-d9799ed7fd69","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AqhDB8tDSHIyBBTQ_8xs7NREs0MubR3N5WcrXQ2Xpt7fQrNrK9C7VIpalPtI\"}"} {"level":"debug","ts":"2026-07-20T18:38:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5c3a8288-6188-49cc-8554-d9799ed7fd69","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c3902cbb-9793-40ec-b3a5-96969f41ad6d","keyName":"e2e-rate-a-7f67fc","subscription":"e2e-rate-iso-a-7f67fc","tenant":"e2e-shared-a-daa21b","userId":"c3902cbb-9793-40ec-b3a5-96969f41ad6d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T18:38:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5c3a8288-6188-49cc-8554-d9799ed7fd69","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b\",\"requestedSubscription\":\"e2e-rate-iso-a-7f67fc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T18:38:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5c3a8288-6188-49cc-8554-d9799ed7fd69","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-daa21b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7f67fc","namespace":"ai-tenant-e2e-shared-a-daa21b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b"}} {"level":"debug","ts":"2026-07-20T18:38:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c3a8288-6188-49cc-8554-d9799ed7fd69","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c3a8288-6188-49cc-8554-d9799ed7fd69","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c3a8288-6188-49cc-8554-d9799ed7fd69","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c3a8288-6188-49cc-8554-d9799ed7fd69","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daa21b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c3a8288-6188-49cc-8554-d9799ed7fd69","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c3a8288-6188-49cc-8554-d9799ed7fd69","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T18:38:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c3a8288-6188-49cc-8554-d9799ed7fd69","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7f67fc"} {"level":"debug","ts":"2026-07-20T18:38:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c3a8288-6188-49cc-8554-d9799ed7fd69","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T18:38:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c3a8288-6188-49cc-8554-d9799ed7fd69","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c3902cbb-9793-40ec-b3a5-96969f41ad6d","keyName":"e2e-rate-a-7f67fc","selected_subscription":"e2e-rate-iso-a-7f67fc","selected_subscription_key":"ai-tenant-e2e-shared-a-daa21b/e2e-rate-iso-a-7f67fc@ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-daa21b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7f67fc","namespace":"ai-tenant-e2e-shared-a-daa21b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T18:38:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c3a8288-6188-49cc-8554-d9799ed7fd69","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:38:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c3a8288-6188-49cc-8554-d9799ed7fd69","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:38:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b41a122-f029-4bab-ad2c-275a65df68ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52490","PortSpecifier":{"PortValue":52490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b41a122-f029-4bab-ad2c-275a65df68ff","method":"POST","path":"/ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b/v1/completions","host":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:38:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b41a122-f029-4bab-ad2c-275a65df68ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52490","PortSpecifier":{"PortValue":52490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572712,"nanos":807905590},"http":{"id":"9b41a122-f029-4bab-ad2c-275a65df68ff","method":"POST","headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b41a122-f029-4bab-ad2c-275a65df68ff","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AqhDB8tDSHIyBBTQ_8xs7NREs0MubR3N5WcrXQ2Xpt7fQrNrK9C7VIpalPtI"} {"level":"debug","ts":"2026-07-20T18:38:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9b41a122-f029-4bab-ad2c-275a65df68ff","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AqhDB8tDSHIyBBTQ_8xs7NREs0MubR3N5WcrXQ2Xpt7fQrNrK9C7VIpalPtI\"}"} {"level":"debug","ts":"2026-07-20T18:38:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9b41a122-f029-4bab-ad2c-275a65df68ff","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c3902cbb-9793-40ec-b3a5-96969f41ad6d","keyName":"e2e-rate-a-7f67fc","subscription":"e2e-rate-iso-a-7f67fc","tenant":"e2e-shared-a-daa21b","userId":"c3902cbb-9793-40ec-b3a5-96969f41ad6d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T18:38:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9b41a122-f029-4bab-ad2c-275a65df68ff","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b\",\"requestedSubscription\":\"e2e-rate-iso-a-7f67fc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T18:38:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9b41a122-f029-4bab-ad2c-275a65df68ff","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-daa21b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7f67fc","namespace":"ai-tenant-e2e-shared-a-daa21b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b"}} {"level":"debug","ts":"2026-07-20T18:38:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b41a122-f029-4bab-ad2c-275a65df68ff","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b41a122-f029-4bab-ad2c-275a65df68ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b41a122-f029-4bab-ad2c-275a65df68ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b41a122-f029-4bab-ad2c-275a65df68ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daa21b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b41a122-f029-4bab-ad2c-275a65df68ff","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b41a122-f029-4bab-ad2c-275a65df68ff","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T18:38:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b41a122-f029-4bab-ad2c-275a65df68ff","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7f67fc"} {"level":"debug","ts":"2026-07-20T18:38:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b41a122-f029-4bab-ad2c-275a65df68ff","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T18:38:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b41a122-f029-4bab-ad2c-275a65df68ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c3902cbb-9793-40ec-b3a5-96969f41ad6d","keyName":"e2e-rate-a-7f67fc","selected_subscription":"e2e-rate-iso-a-7f67fc","selected_subscription_key":"ai-tenant-e2e-shared-a-daa21b/e2e-rate-iso-a-7f67fc@ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-daa21b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7f67fc","namespace":"ai-tenant-e2e-shared-a-daa21b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T18:38:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b41a122-f029-4bab-ad2c-275a65df68ff","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:38:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b41a122-f029-4bab-ad2c-275a65df68ff","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:38:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"019fdb82-3ad7-467e-b663-1c1957cee4c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52504","PortSpecifier":{"PortValue":52504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"019fdb82-3ad7-467e-b663-1c1957cee4c9","method":"POST","path":"/ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b/v1/completions","host":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:38:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"019fdb82-3ad7-467e-b663-1c1957cee4c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52504","PortSpecifier":{"PortValue":52504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572713,"nanos":845693267},"http":{"id":"019fdb82-3ad7-467e-b663-1c1957cee4c9","method":"POST","headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"019fdb82-3ad7-467e-b663-1c1957cee4c9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AqhDB8tDSHIyBBTQ_8xs7NREs0MubR3N5WcrXQ2Xpt7fQrNrK9C7VIpalPtI"} {"level":"debug","ts":"2026-07-20T18:38:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"019fdb82-3ad7-467e-b663-1c1957cee4c9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AqhDB8tDSHIyBBTQ_8xs7NREs0MubR3N5WcrXQ2Xpt7fQrNrK9C7VIpalPtI\"}"} {"level":"debug","ts":"2026-07-20T18:38:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"019fdb82-3ad7-467e-b663-1c1957cee4c9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c3902cbb-9793-40ec-b3a5-96969f41ad6d","keyName":"e2e-rate-a-7f67fc","subscription":"e2e-rate-iso-a-7f67fc","tenant":"e2e-shared-a-daa21b","userId":"c3902cbb-9793-40ec-b3a5-96969f41ad6d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T18:38:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"019fdb82-3ad7-467e-b663-1c1957cee4c9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b\",\"requestedSubscription\":\"e2e-rate-iso-a-7f67fc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T18:38:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"019fdb82-3ad7-467e-b663-1c1957cee4c9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-daa21b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7f67fc","namespace":"ai-tenant-e2e-shared-a-daa21b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b"}} {"level":"debug","ts":"2026-07-20T18:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"019fdb82-3ad7-467e-b663-1c1957cee4c9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"019fdb82-3ad7-467e-b663-1c1957cee4c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"019fdb82-3ad7-467e-b663-1c1957cee4c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"019fdb82-3ad7-467e-b663-1c1957cee4c9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"019fdb82-3ad7-467e-b663-1c1957cee4c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daa21b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"019fdb82-3ad7-467e-b663-1c1957cee4c9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7f67fc"} {"level":"debug","ts":"2026-07-20T18:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"019fdb82-3ad7-467e-b663-1c1957cee4c9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T18:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"019fdb82-3ad7-467e-b663-1c1957cee4c9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T18:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"019fdb82-3ad7-467e-b663-1c1957cee4c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c3902cbb-9793-40ec-b3a5-96969f41ad6d","keyName":"e2e-rate-a-7f67fc","selected_subscription":"e2e-rate-iso-a-7f67fc","selected_subscription_key":"ai-tenant-e2e-shared-a-daa21b/e2e-rate-iso-a-7f67fc@ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-daa21b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7f67fc","namespace":"ai-tenant-e2e-shared-a-daa21b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T18:38:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"019fdb82-3ad7-467e-b663-1c1957cee4c9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:38:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"019fdb82-3ad7-467e-b663-1c1957cee4c9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aea1e005-d718-4b3b-b687-9ce774558f23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54960","PortSpecifier":{"PortValue":54960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aea1e005-d718-4b3b-b687-9ce774558f23","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aea1e005-d718-4b3b-b687-9ce774558f23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54960","PortSpecifier":{"PortValue":54960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572722,"nanos":900922245},"http":{"id":"aea1e005-d718-4b3b-b687-9ce774558f23","method":"POST","headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aea1e005-d718-4b3b-b687-9ce774558f23","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aea1e005-d718-4b3b-b687-9ce774558f23","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"]}} {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aea1e005-d718-4b3b-b687-9ce774558f23","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aea1e005-d718-4b3b-b687-9ce774558f23","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aea1e005-d718-4b3b-b687-9ce774558f23","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aea1e005-d718-4b3b-b687-9ce774558f23","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daa21b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aea1e005-d718-4b3b-b687-9ce774558f23","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aea1e005-d718-4b3b-b687-9ce774558f23","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aea1e005-d718-4b3b-b687-9ce774558f23","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aea1e005-d718-4b3b-b687-9ce774558f23","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aea1e005-d718-4b3b-b687-9ce774558f23","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1eb3b102-0da6-44c9-9e83-4fa0806656a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59322","PortSpecifier":{"PortValue":59322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1eb3b102-0da6-44c9-9e83-4fa0806656a4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1eb3b102-0da6-44c9-9e83-4fa0806656a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59322","PortSpecifier":{"PortValue":59322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572722,"nanos":944402393},"http":{"id":"1eb3b102-0da6-44c9-9e83-4fa0806656a4","method":"POST","headers":{":authority":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1eb3b102-0da6-44c9-9e83-4fa0806656a4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1eb3b102-0da6-44c9-9e83-4fa0806656a4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"]}} {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1eb3b102-0da6-44c9-9e83-4fa0806656a4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/500dada8dde1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9ee722ad-a050-49f5-9a99-4f54283d02c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97e18f9e-a1f8-409f-8325-eff14b658a5e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1eb3b102-0da6-44c9-9e83-4fa0806656a4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d56278/rate-test-model-d56278\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d56278/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1eb3b102-0da6-44c9-9e83-4fa0806656a4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1eb3b102-0da6-44c9-9e83-4fa0806656a4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1eb3b102-0da6-44c9-9e83-4fa0806656a4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"1eb3b102-0da6-44c9-9e83-4fa0806656a4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"context canceled"} {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"1eb3b102-0da6-44c9-9e83-4fa0806656a4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"context canceled"} {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"1eb3b102-0da6-44c9-9e83-4fa0806656a4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"reason":"context canceled"} {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1eb3b102-0da6-44c9-9e83-4fa0806656a4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1eb3b102-0da6-44c9-9e83-4fa0806656a4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1eb3b102-0da6-44c9-9e83-4fa0806656a4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1eb3b102-0da6-44c9-9e83-4fa0806656a4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fbe6ce0-5af0-4597-aebb-d5e89390e23b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54974","PortSpecifier":{"PortValue":54974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7fbe6ce0-5af0-4597-aebb-d5e89390e23b","method":"POST","path":"/ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b/v1/completions","host":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fbe6ce0-5af0-4597-aebb-d5e89390e23b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54974","PortSpecifier":{"PortValue":54974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572722,"nanos":992933880},"http":{"id":"7fbe6ce0-5af0-4597-aebb-d5e89390e23b","method":"POST","headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7fbe6ce0-5af0-4597-aebb-d5e89390e23b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BTdn1ygtMhJo0IBA_OrvhIgK4Z3HZmzAFxuT8ePtZ2PwAum6cG5e46pJDlg4"} {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7fbe6ce0-5af0-4597-aebb-d5e89390e23b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BTdn1ygtMhJo0IBA_OrvhIgK4Z3HZmzAFxuT8ePtZ2PwAum6cG5e46pJDlg4\"}"} {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7fbe6ce0-5af0-4597-aebb-d5e89390e23b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"089d91d3-5f52-4bf4-a93d-7684bb40f946","keyName":"e2e-rate-a-dde95a","subscription":"e2e-rate-iso-a-dde95a","tenant":"e2e-shared-a-daa21b","userId":"089d91d3-5f52-4bf4-a93d-7684bb40f946","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7fbe6ce0-5af0-4597-aebb-d5e89390e23b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b\",\"requestedSubscription\":\"e2e-rate-iso-a-dde95a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7fbe6ce0-5af0-4597-aebb-d5e89390e23b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-daa21b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dde95a","namespace":"ai-tenant-e2e-shared-a-daa21b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b"}} {"level":"debug","ts":"2026-07-20T18:38:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7fbe6ce0-5af0-4597-aebb-d5e89390e23b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fbe6ce0-5af0-4597-aebb-d5e89390e23b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fbe6ce0-5af0-4597-aebb-d5e89390e23b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fbe6ce0-5af0-4597-aebb-d5e89390e23b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fbe6ce0-5af0-4597-aebb-d5e89390e23b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daa21b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fbe6ce0-5af0-4597-aebb-d5e89390e23b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T18:38:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fbe6ce0-5af0-4597-aebb-d5e89390e23b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T18:38:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fbe6ce0-5af0-4597-aebb-d5e89390e23b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dde95a"} {"level":"debug","ts":"2026-07-20T18:38:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fbe6ce0-5af0-4597-aebb-d5e89390e23b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"089d91d3-5f52-4bf4-a93d-7684bb40f946","keyName":"e2e-rate-a-dde95a","selected_subscription":"e2e-rate-iso-a-dde95a","selected_subscription_key":"ai-tenant-e2e-shared-a-daa21b/e2e-rate-iso-a-dde95a@ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-daa21b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dde95a","namespace":"ai-tenant-e2e-shared-a-daa21b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T18:38:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fbe6ce0-5af0-4597-aebb-d5e89390e23b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:38:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fbe6ce0-5af0-4597-aebb-d5e89390e23b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:38:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d163a103-6cde-4f3e-9822-2f16de9f3472","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54982","PortSpecifier":{"PortValue":54982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d163a103-6cde-4f3e-9822-2f16de9f3472","method":"POST","path":"/ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b/v1/completions","host":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:38:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d163a103-6cde-4f3e-9822-2f16de9f3472","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54982","PortSpecifier":{"PortValue":54982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572724,"nanos":32432383},"http":{"id":"d163a103-6cde-4f3e-9822-2f16de9f3472","method":"POST","headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d163a103-6cde-4f3e-9822-2f16de9f3472","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BTdn1ygtMhJo0IBA_OrvhIgK4Z3HZmzAFxuT8ePtZ2PwAum6cG5e46pJDlg4"} {"level":"debug","ts":"2026-07-20T18:38:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d163a103-6cde-4f3e-9822-2f16de9f3472","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BTdn1ygtMhJo0IBA_OrvhIgK4Z3HZmzAFxuT8ePtZ2PwAum6cG5e46pJDlg4\"}"} {"level":"debug","ts":"2026-07-20T18:38:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d163a103-6cde-4f3e-9822-2f16de9f3472","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"089d91d3-5f52-4bf4-a93d-7684bb40f946","keyName":"e2e-rate-a-dde95a","subscription":"e2e-rate-iso-a-dde95a","tenant":"e2e-shared-a-daa21b","userId":"089d91d3-5f52-4bf4-a93d-7684bb40f946","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T18:38:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d163a103-6cde-4f3e-9822-2f16de9f3472","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b\",\"requestedSubscription\":\"e2e-rate-iso-a-dde95a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T18:38:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d163a103-6cde-4f3e-9822-2f16de9f3472","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-daa21b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dde95a","namespace":"ai-tenant-e2e-shared-a-daa21b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b"}} {"level":"debug","ts":"2026-07-20T18:38:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d163a103-6cde-4f3e-9822-2f16de9f3472","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d163a103-6cde-4f3e-9822-2f16de9f3472","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d163a103-6cde-4f3e-9822-2f16de9f3472","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d163a103-6cde-4f3e-9822-2f16de9f3472","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daa21b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d163a103-6cde-4f3e-9822-2f16de9f3472","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d163a103-6cde-4f3e-9822-2f16de9f3472","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T18:38:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d163a103-6cde-4f3e-9822-2f16de9f3472","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dde95a"} {"level":"debug","ts":"2026-07-20T18:38:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d163a103-6cde-4f3e-9822-2f16de9f3472","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T18:38:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d163a103-6cde-4f3e-9822-2f16de9f3472","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"089d91d3-5f52-4bf4-a93d-7684bb40f946","keyName":"e2e-rate-a-dde95a","selected_subscription":"e2e-rate-iso-a-dde95a","selected_subscription_key":"ai-tenant-e2e-shared-a-daa21b/e2e-rate-iso-a-dde95a@ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-daa21b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dde95a","namespace":"ai-tenant-e2e-shared-a-daa21b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T18:38:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d163a103-6cde-4f3e-9822-2f16de9f3472","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:38:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d163a103-6cde-4f3e-9822-2f16de9f3472","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6cafff67-cba1-409e-9c0f-ebc8b3acea15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54992","PortSpecifier":{"PortValue":54992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6cafff67-cba1-409e-9c0f-ebc8b3acea15","method":"POST","path":"/ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b/v1/completions","host":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6cafff67-cba1-409e-9c0f-ebc8b3acea15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:54992","PortSpecifier":{"PortValue":54992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572725,"nanos":71698709},"http":{"id":"6cafff67-cba1-409e-9c0f-ebc8b3acea15","method":"POST","headers":{":authority":"e2e-shared-a-daa21b.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6cafff67-cba1-409e-9c0f-ebc8b3acea15","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BTdn1ygtMhJo0IBA_OrvhIgK4Z3HZmzAFxuT8ePtZ2PwAum6cG5e46pJDlg4"} {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6cafff67-cba1-409e-9c0f-ebc8b3acea15","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BTdn1ygtMhJo0IBA_OrvhIgK4Z3HZmzAFxuT8ePtZ2PwAum6cG5e46pJDlg4\"}"} {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6cafff67-cba1-409e-9c0f-ebc8b3acea15","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"089d91d3-5f52-4bf4-a93d-7684bb40f946","keyName":"e2e-rate-a-dde95a","subscription":"e2e-rate-iso-a-dde95a","tenant":"e2e-shared-a-daa21b","userId":"089d91d3-5f52-4bf4-a93d-7684bb40f946","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6cafff67-cba1-409e-9c0f-ebc8b3acea15","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b\",\"requestedSubscription\":\"e2e-rate-iso-a-dde95a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6cafff67-cba1-409e-9c0f-ebc8b3acea15","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-daa21b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-daa21b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dde95a","namespace":"ai-tenant-e2e-shared-a-daa21b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b"}} {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6cafff67-cba1-409e-9c0f-ebc8b3acea15","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cafff67-cba1-409e-9c0f-ebc8b3acea15","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cafff67-cba1-409e-9c0f-ebc8b3acea15","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cafff67-cba1-409e-9c0f-ebc8b3acea15","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cafff67-cba1-409e-9c0f-ebc8b3acea15","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-daa21b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cafff67-cba1-409e-9c0f-ebc8b3acea15","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cafff67-cba1-409e-9c0f-ebc8b3acea15","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cafff67-cba1-409e-9c0f-ebc8b3acea15","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dde95a"} {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cafff67-cba1-409e-9c0f-ebc8b3acea15","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"089d91d3-5f52-4bf4-a93d-7684bb40f946","keyName":"e2e-rate-a-dde95a","selected_subscription":"e2e-rate-iso-a-dde95a","selected_subscription_key":"ai-tenant-e2e-shared-a-daa21b/e2e-rate-iso-a-dde95a@ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-daa21b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dde95a","namespace":"ai-tenant-e2e-shared-a-daa21b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-daa21b/rate-test-model-daa21b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6cafff67-cba1-409e-9c0f-ebc8b3acea15","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6cafff67-cba1-409e-9c0f-ebc8b3acea15","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca451147-3a30-410a-a2dc-e91985e65a26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59334","PortSpecifier":{"PortValue":59334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca451147-3a30-410a-a2dc-e91985e65a26","method":"POST","path":"/ai-tenant-e2e-shared-b-d56278/rate-test-model-d56278/v1/completions","host":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca451147-3a30-410a-a2dc-e91985e65a26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59334","PortSpecifier":{"PortValue":59334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784572725,"nanos":108605570},"http":{"id":"ca451147-3a30-410a-a2dc-e91985e65a26","method":"POST","headers":{":authority":"e2e-shared-b-d56278.apps.4233d852-0456-4540-88b8-500dada8dde1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-d56278/rate-test-model-d56278/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca451147-3a30-410a-a2dc-e91985e65a26","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1NWDoCEjm8IUwQ37D_vhw3RqmtEYQv0I3TWrYbP6dphS2nX6esKSBJgsQA0oO"} {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca451147-3a30-410a-a2dc-e91985e65a26","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d56278.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1NWDoCEjm8IUwQ37D_vhw3RqmtEYQv0I3TWrYbP6dphS2nX6esKSBJgsQA0oO\"}"} {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca451147-3a30-410a-a2dc-e91985e65a26","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d56278.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b36d0718-234a-4f3f-8d2d-4ca05f55ab4a","keyName":"e2e-rate-b-dde95a","subscription":"e2e-rate-iso-b-dde95a","tenant":"e2e-shared-b-d56278","userId":"b36d0718-234a-4f3f-8d2d-4ca05f55ab4a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca451147-3a30-410a-a2dc-e91985e65a26","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-d56278.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-d56278/rate-test-model-d56278\",\"requestedSubscription\":\"e2e-rate-iso-b-dde95a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca451147-3a30-410a-a2dc-e91985e65a26","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d56278.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d56278","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-dde95a","namespace":"ai-tenant-e2e-shared-b-d56278","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-d56278/rate-test-model-d56278"}} {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca451147-3a30-410a-a2dc-e91985e65a26","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca451147-3a30-410a-a2dc-e91985e65a26","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca451147-3a30-410a-a2dc-e91985e65a26","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca451147-3a30-410a-a2dc-e91985e65a26","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d56278/rate-test-model-d56278\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d56278/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca451147-3a30-410a-a2dc-e91985e65a26","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca451147-3a30-410a-a2dc-e91985e65a26","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-dde95a"} {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca451147-3a30-410a-a2dc-e91985e65a26","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca451147-3a30-410a-a2dc-e91985e65a26","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca451147-3a30-410a-a2dc-e91985e65a26","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b36d0718-234a-4f3f-8d2d-4ca05f55ab4a","keyName":"e2e-rate-b-dde95a","selected_subscription":"e2e-rate-iso-b-dde95a","selected_subscription_key":"ai-tenant-e2e-shared-b-d56278/e2e-rate-iso-b-dde95a@ai-tenant-e2e-shared-b-d56278/rate-test-model-d56278","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d56278","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-dde95a","namespace":"ai-tenant-e2e-shared-b-d56278","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-d56278/rate-test-model-d56278"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca451147-3a30-410a-a2dc-e91985e65a26","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T18:38:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca451147-3a30-410a-a2dc-e91985e65a26","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T18:38:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/378b71035f2dc864eae0976220ec60666ddca835aa1f5f6d89d2eead93bea151"} {"level":"info","ts":"2026-07-20T18:38:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a3671578e8be4cde04df50130fdda953c5d917dc325328230ecc93afc7c59f1"} {"level":"info","ts":"2026-07-20T18:38:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b6574d92c0d9ca28c8bc567e6061534928db77fa80632eb1456fc34e95fe062"} {"level":"info","ts":"2026-07-20T18:38:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9073ed9734c8948766df9436b5eabf979dc761f580918776b99a9f89d6d2aa5"} {"level":"info","ts":"2026-07-20T18:38:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8fa9a210149c42706689d44f737ec92438ad243b19858cd52c898bad22a7eae"} {"level":"info","ts":"2026-07-20T18:38:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44b4b59af61caf95d89b59ce6155bc7a5c8febbe1e5cfeefb9da83a966461833"} {"level":"info","ts":"2026-07-20T18:38:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d77742ec82c63ccfc15e930af15f3e74ec13778c66ae9c22128dd0dda8cdf447"} {"level":"info","ts":"2026-07-20T18:38:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e35e5908cb5df9bf7aac69e09be276165661617f5eab7ee284be3d96ec2b232"} {"level":"info","ts":"2026-07-20T18:38:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8561b49755a02177d6e6ae2ca3b79ce55152756abf1bf3847380f76b03c9941"} {"level":"info","ts":"2026-07-20T18:38:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3011a98d3a5c3ae3cd2f47a4685448330a826cc71eb66eba83988c4953877353"} {"level":"info","ts":"2026-07-20T18:38:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/827293c52584840d6aee881d286440aca2c16f4ef104a4559e31ab061fe8229c"} {"level":"info","ts":"2026-07-20T18:38:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/12630ee62ec340d2bde6c2bdd50022a5231b87a2d86747af6b3cad0d6f9afaf0"} {"level":"info","ts":"2026-07-20T18:38:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/124cf9d60fb6a109db266f580e1d7294753b1d764c6643b566bd119efef722e0"} {"level":"info","ts":"2026-07-20T18:38:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25d453ffa5fa8792fb124daab4411f2961b4b3030f1db7646859434d83950279"} {"level":"info","ts":"2026-07-20T18:38:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53866ab14b60b8c71f0dec13af12976c5069dae60a78392e85066af53251053e"} {"level":"info","ts":"2026-07-20T18:38:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b607549eddf4151203b79a5beacb24aafac6c7d6ba1f8b997542abc65b12e2c0"} {"level":"info","ts":"2026-07-20T18:38:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0ab244a2ce4d9a355b31ad726286b87058680573e8c19dc5732d3df35a5cef3"} {"level":"info","ts":"2026-07-20T18:38:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e03ed49f09ab9f7031c673351619ef7bc6379c945ed5a8e5999bd5deb312e71"} {"level":"info","ts":"2026-07-20T18:38:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2aa62e99ff6d4a083ac54b0a59c401b6aefc749becf3cde351ea3ab41088c181"} {"level":"info","ts":"2026-07-20T18:38:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0448bd386c1995cb8b2babd2288fbe395e3742d73d735fdf072eba41b3b24f44"} {"level":"info","ts":"2026-07-20T18:38:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9de294ffeef98f796b16759bd3590be522f058cc90551de049ebdcb2f0b7748f"} {"level":"info","ts":"2026-07-20T18:38:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/168ec55ea3ec5186fd248582d9f167c5cf2e9c8f00f0bd11a5d7d322291c6878"} {"level":"info","ts":"2026-07-20T18:38:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63167136c361a73f019ba273c9a5881ffa93d53d5beacfd2901d8d768754929b"} {"level":"info","ts":"2026-07-20T18:38:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f05a493ecf0a700ef88a4a5d2a6b612261269ad6c53c4e0620646532fed82bb"}